Category | Machine | Started | Completed |
---|---|---|---|
FILE | s1_win7_x6401 | Oct. 12, 2023, 7:42 a.m. | Oct. 12, 2023, 7:44 a.m. |
-
smss.exe "C:\Users\test22\AppData\Local\Temp\smss.exe"
2564
Name | Response | Post-Analysis Lookup |
---|---|---|
No hosts contacted. |
IP Address | Status | Action |
---|---|---|
No hosts contacted. |
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
section | .ndata |
file | C:\Users\test22\AppData\Local\Temp\nspEFB0.tmp\System.dll |
file | C:\Users\test22\AppData\Local\Temp\nspEFB0.tmp\System.dll |
section | {u'size_of_data': u'0x00021e00', u'virtual_address': u'0x0003a000', u'entropy': 7.758972914922991, u'name': u'.rsrc', u'virtual_size': u'0x00021d08'} | entropy | 7.75897291492 | description | A section with a high entropy has been found | |||||||||
entropy | 0.818731117825 | description | Overall entropy of this PE file is high |
Lionic | Trojan.Win32.Makoob.4!c |
Elastic | malicious (high confidence) |
MicroWorld-eScan | Gen:Variant.Tedy.456428 |
Skyhigh | Artemis!Trojan |
McAfee | Artemis!CED4AF5A976F |
Malwarebytes | Trojan.Injector.NSIS |
Alibaba | Trojan:Win32/Makoob.ab7f65f1 |
Symantec | Trojan.Gen.MBT |
ESET-NOD32 | NSIS/Injector.CCQ |
APEX | Malicious |
Kaspersky | HEUR:Trojan.Win32.Makoob.gen |
BitDefender | Gen:Variant.Tedy.456428 |
Avast | NSIS:InjectorX-gen [Trj] |
Tencent | Win32.Trojan.FalseSign.Jcnw |
Emsisoft | Gen:Variant.Tedy.456428 (B) |
FireEye | Gen:Variant.Tedy.456428 |
Sophos | Mal/Generic-S |
GData | Gen:Variant.Tedy.456428 |
Webroot | W32.Injector.Gen |
MAX | malware (ai score=86) |
Kingsoft | malware.kb.a.701 |
Gridinsoft | Trojan.Win32.FormBook.bot |
Arcabit | Trojan.Tedy.D6F6EC |
ZoneAlarm | HEUR:Trojan.Win32.Makoob.gen |
Microsoft | Trojan:Win32/Makoob.SPSF!MTB |
Detected | |
ALYac | Gen:Variant.Tedy.456428 |
Cylance | unsafe |
Panda | Trj/CI.A |
Ikarus | Trojan.NSIS.Agent |
AVG | NSIS:InjectorX-gen [Trj] |
DeepInstinct | MALICIOUS |
CrowdStrike | win/malicious_confidence_90% (W) |