Category | Machine | Started | Completed |
---|---|---|---|
FILE | s1_win7_x6403_us | July 11, 2024, 1:20 p.m. | July 11, 2024, 1:33 p.m. |
-
go.exe "C:\Users\test22\AppData\Local\Temp\go.exe"
1076
Name | Response | Post-Analysis Lookup |
---|---|---|
No hosts contacted. |
IP Address | Status | Action |
---|---|---|
164.124.101.2 | Active | Moloch |
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
section | .symtab |
Bkav | W64.AIDetectMalware |
Elastic | malicious (moderate confidence) |
Skyhigh | BehavesLike.Win64.Backdoor.rh |
McAfee | Artemis!6B7CA7AA20D0 |
Kaspersky | UDS:DangerousObject.Multi.Generic |
Ikarus | Trojan.WinGo.Rozena |
Detected | |
Antiy-AVL | Trojan/Win32.Agent |
Kingsoft | Win32.Troj.Unknown.a |
ZoneAlarm | UDS:DangerousObject.Multi.Generic |
AhnLab-V3 | Malware/Win.Generic.C5612105 |
DeepInstinct | MALICIOUS |
Malwarebytes | Malware.AI.4279104977 |
SentinelOne | Static AI - Suspicious PE |
Fortinet | Malicious_Behavior.SB |
CrowdStrike | win/malicious_confidence_70% (D) |