1.8
低危

561edd9f70bcb31e317b9af7c23b6fcf1af80a556a5837042154880296dd946a

482ce5f6301388f450c2b03c4817213b.exe

分析耗时

218s

最近分析

文件大小

647.5KB
静态报毒 动态报毒 AGEN AGENSLA AGENTTESLA AGWL AI SCORE=88 CLASSIC CONFIDENCE ELDORADO FAREIT GDSDA GENERICKD HIGH CONFIDENCE HMMTQZ KCLOUD KRYPTIK MALICIOUS PE MALWARE@#3DW0MKUCHQNSZ OM0@AOXT6NN PBPK POSSIBLE PSWTROJ QQPASS QQROB SCORE SMNEGASTEAL STATIC AI SUSGEN TROJANPSW TSCOPE UNSAFE YMACCO ZEMSILF 更多
鹰眼引擎
未检测 暂无鹰眼引擎检测结果
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
Alibaba TrojanPSW:MSIL/Agensla.708ed239 20190527 0.3.0.5
Avast Win32:Malware-gen 20201201 20.10.5736.0
Baidu 20190318 1.0.0.2
Kingsoft Win32.PSWTroj.Undef.(kcloud) 20201201 2017.9.26.565
McAfee Fareit-FRZ!482CE5F63013 20201201 6.0.6.653
Tencent Msil.Trojan-qqpass.Qqrob.Pbpk 20201201 1.0.0.1
CrowdStrike win/malicious_confidence_80% (D) 20190702 1.0
静态指标
行为判定
动态指标
网络通信
Communicates with host for which no DNS query was performed (1 个事件)
host 172.217.24.14
File has been identified by 57 AntiVirus engines on VirusTotal as malicious (50 out of 57 个事件)
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.GenericKD.43289156
FireEye Generic.mg.482ce5f6301388f4
ALYac Trojan.GenericKD.43289156
Cylance Unsafe
Zillya Trojan.Agensla.Win32.2552
Sangfor Malware
K7AntiVirus Trojan ( 005681e21 )
Alibaba TrojanPSW:MSIL/Agensla.708ed239
K7GW Trojan ( 005681e21 )
Cybereason malicious.c8a632
Arcabit Trojan.Generic.D2948A44
BitDefenderTheta Gen:NN.ZemsilF.34658.Om0@aOxT6nn
Cyren W32/MSIL_Kryptik.AWA.gen!Eldorado
Symantec Packed.Generic.534
APEX Malicious
Avast Win32:Malware-gen
ClamAV Win.Malware.AgentTesla-7660762-0
Kaspersky HEUR:Trojan-PSW.MSIL.Agensla.gen
BitDefender Trojan.GenericKD.43289156
NANO-Antivirus Trojan.Win32.Kryptik.hmmtqz
Paloalto generic.ml
Rising Spyware.AgentTesla!1.B864 (CLASSIC)
Ad-Aware Trojan.GenericKD.43289156
Emsisoft Trojan.GenericKD.43289156 (B)
Comodo Malware@#3dw0mkuchqnsz
F-Secure Heuristic.HEUR/AGEN.1137332
VIPRE Trojan.Win32.Generic!BT
TrendMicro Possible_SMNEGASTEAL
McAfee-GW-Edition BehavesLike.Win32.Generic.jm
Sophos Mal/Generic-S
Ikarus Trojan-Spy.Agent
Jiangmin Trojan.PSW.MSIL.agwl
Avira HEUR/AGEN.1137332
MAX malware (ai score=88)
Antiy-AVL Trojan[PSW]/MSIL.Agensla
Kingsoft Win32.PSWTroj.Undef.(kcloud)
Gridinsoft Trojan.AgentTesla.B.sd!yf
Microsoft Trojan:Win32/Ymacco.AA56
AegisLab Trojan.MSIL.Agensla.i!c
ZoneAlarm HEUR:Trojan-PSW.MSIL.Agensla.gen
GData Trojan.GenericKD.43289156
Cynet Malicious (score: 85)
AhnLab-V3 Trojan/Win32.Kryptik.C4118976
McAfee Fareit-FRZ!482CE5F63013
VBA32 TScope.Trojan.MSIL
Malwarebytes Spyware.AgentTesla
ESET-NOD32 a variant of MSIL/Kryptik.WET
TrendMicro-HouseCall Possible_SMNEGASTEAL
Tencent Msil.Trojan-qqpass.Qqrob.Pbpk
可视化分析
二进制图像
暂无二进制图像 该样本未生成二进制可视化图像
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手,可以帮您分析和解读恶意软件报告。请随时向我提问!

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2019-10-01 17:48:11

Imports

Library mscoree.dll:
0x402000 _CorExeMain

Hosts

No hosts contacted.

DNS

No domains contacted.

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.56.101 56804 224.0.0.252 5355
192.168.56.101 1900 239.255.255.250 1900
192.168.56.101 58707 239.255.255.250 3702
192.168.56.101 59704 239.255.255.250 1900

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.