Category | Machine | Started | Completed |
---|---|---|---|
FILE | s1_win7_x6403_us | July 15, 2024, 4:37 p.m. | July 15, 2024, 4:44 p.m. |
-
kz_kkm_2.4.2.3.exe "C:\Users\test22\AppData\Local\Temp\kz_kkm_2.4.2.3.exe"
1712 -
explorer.exe C:\Windows\Explorer.EXE
1236
Name | Response | Post-Analysis Lookup |
---|---|---|
No hosts contacted. |
IP Address | Status | Action |
---|---|---|
No hosts contacted. |
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
section | .ndata |
file | C:\Users\test22\AppData\Roaming\KkmAgent\Newtonsoft.Json.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\Newtonsoft.Json.Bson.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\Atol.Drivers10.Fptr.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\Swashbuckle.AspNetCore.SwaggerUI.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\Microsoft.Diagnostics.Tracing.EventSource.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\Newtonsoft.Json.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\ManagedOpenSsl.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\Atol.Drivers10.Fptr.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\QRCoder.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\PilotNtSharp.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\Swagger.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\BarcodeLib.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\Swashbuckle.AspNetCore.Newtonsoft.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\HtmlAgilityPack.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\TSCLIB.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\Microsoft.AspNetCore.JsonPatch.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\libcrypto-3.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\KKMLib.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\Swagger.exe |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\Microsoft.OpenApi.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\NLog.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\SushkofWin32Lib.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\DualConnector.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\NLog.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\KKMAgent.exe |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\RabbitMQ.Client.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\libssl-3.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\Swashbuckle.AspNetCore.Swagger.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\SushkofWin32Lib.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\HttpServer.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\DualConnector.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\KKMCommon.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\KKMLib.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\Swashbuckle.AspNetCore.SwaggerGen.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\Microsoft.AspNetCore.Mvc.NewtonsoftJson.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\PilotNtSharp.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\KKMCommon.dll |
file | C:\Users\test22\AppData\Local\Temp\nsxC158.tmp\nsProcess.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\RabbitMQ.Client.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\uninstall.exe |
file | C:\Users\test22\AppData\Roaming\KkmAgent\ManagedOpenSsl.dll |
file | C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Avermaster\KKMAgent.lnk |
file | C:\Users\test22\AppData\Roaming\KkmAgent\AutoUpdater.NET.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\Microsoft.Diagnostics.Tracing.EventSource.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\BarcodeLib.dll |
file | C:\Users\test22\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Avermaster\KKMAgent.lnk |
file | C:\Users\test22\AppData\Roaming\KkmAgent\HttpServer.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\Swashbuckle.AspNetCore.Swagger.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\DualConnector.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\libcrypto-3.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\Microsoft.OpenApi.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\Newtonsoft.Json.Bson.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\AutoUpdater.NET.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\Swagger.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\SushkofWin32Lib.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\QRCoder.dll |
file | C:\Users\test22\AppData\Local\Temp\nsxC158.tmp\nsProcess.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\KKMCommon.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\RabbitMQ.Client.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\Swashbuckle.AspNetCore.SwaggerGen.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\Swashbuckle.AspNetCore.Newtonsoft.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\ManagedOpenSsl.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\NLog.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\Microsoft.Diagnostics.Tracing.EventSource.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\KKMAgent.exe |
file | C:\Users\test22\AppData\Roaming\KkmAgent\Newtonsoft.Json.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\PilotNtSharp.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\uninstall.exe |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\Microsoft.AspNetCore.Mvc.NewtonsoftJson.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\KKMLib.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\HtmlAgilityPack.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\TSCLIB.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\Microsoft.AspNetCore.JsonPatch.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\Swashbuckle.AspNetCore.SwaggerUI.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\Atol.Drivers10.Fptr.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\api\Newtonsoft.Json.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\libssl-3.dll |
file | C:\Users\test22\AppData\Roaming\KkmAgent\BarcodeLib.dll |
reg_key | HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\KKMAgent | reg_value | C:\Users\test22\AppData\Roaming\KkmAgent\KKMAgent.exe |
Bkav | W32.AIDetectMalware |
Elastic | malicious (high confidence) |
Cynet | Malicious (score: 100) |
Cylance | Unsafe |
APEX | Malicious |
Kaspersky | HEUR:Trojan.Win32.Scar.gen |
Trapmine | malicious.moderate.ml.score |
FireEye | Generic.mg.40a22356fd06bc9a |
Kingsoft | malware.kb.a.864 |
ZoneAlarm | HEUR:Trojan.Win32.Scar.gen |
DeepInstinct | MALICIOUS |
Malwarebytes | Malware.AI.1865480811 |