TestikBro.exe| Category | Machine | Started | Completed |
|---|---|---|---|
| FILE | s1_win7_x6403_us | Aug. 19, 2024, 2 p.m. | Aug. 19, 2024, 2:54 p.m. |
-
TestikBro.exe "C:\Users\test22\AppData\Local\Temp\TestikBro.exe"
1900
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| bitbucket.org | 104.192.140.24 |
Suricata Alerts
| Flow | SID | Signature | Category |
|---|---|---|---|
| TCP 192.168.56.103:49164 -> 104.192.140.24:443 | 906200054 | SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee) | undefined |
| TCP 192.168.56.103:49165 -> 104.192.140.24:443 | 906200054 | SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee) | undefined |
Suricata TLS
No Suricata TLS
| section | _RDATA |
| file | C:\Users\test22\AppData\Local\file1.exe |
| Bkav | W64.AIDetectMalware |
| Elastic | malicious (high confidence) |
| Cylance | Unsafe |
| Symantec | ML.Attribute.HighConfidence |
| APEX | Malicious |
| Avast | Win64:DropperX-gen [Drp] |
| Kaspersky | UDS:DangerousObject.Multi.Generic |
| Rising | Downloader.Agent!8.B23 (CLOUD) |
| McAfeeD | ti!3271F49B0F0A |
| Ikarus | Trojan.Win64.Agent |
| Detected | |
| Kingsoft | Win32.Troj.Unknown.a |
| Microsoft | Trojan:Win32/Wacatac.B!ml |
| ZoneAlarm | UDS:DangerousObject.Multi.Generic |
| DeepInstinct | MALICIOUS |
| AVG | Win64:DropperX-gen [Drp] |
| Paloalto | generic.ml |
| CrowdStrike | win/malicious_confidence_70% (D) |