1.8
低危
42 个模型检测该样本为恶意！
重新分析
更多

dfdc57792a92d48a0a618379cc2522678bb549119d8bddcb280a3707ea3382df

6c13b5f3117b174ff03eab5a0557632c.exe

分析耗时

16s

最近分析

文件大小

874.0KB
静态报毒 动态报毒 AGENTTESLA AI SCORE=84 CYUUI ELDORADO ENCODED FAREIT GDSDA GENERICKD HIGH CONFIDENCE HOIEBI KRYPTIK MALWARE@#68031AMOAP3U MALWAREX NEGASTEAL R + TROJ R345483 SCORE SIGGEN9 SMAUJ TEFOSTEAL TSCOPE WOPV 更多
鹰眼引擎
未检测 暂无鹰眼引擎检测结果
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
McAfee Fareit-FXO!42D49FBEC699 20201211 6.0.6.653
Baidu 20190318 1.0.0.2
Avast Win32:MalwareX-gen [Trj] 20201210 21.1.5827.0
Kingsoft 20201211 2017.9.26.565
Tencent Msil.Trojan.Crypt.Wopv 20201211 1.0.0.1
静态指标
行为判定
动态指标
网络通信
Communicates with host for which no DNS query was performed (2 个事件)
host 113.16.209.193
host 172.217.24.14
File has been identified by 42 AntiVirus engines on VirusTotal as malicious (42 个事件)
Elastic malicious (high confidence)
MicroWorld-eScan Trojan.GenericKD.43540738
FireEye Trojan.GenericKD.43540738
McAfee Fareit-FXO!42D49FBEC699
Sangfor Malware
K7AntiVirus Trojan ( 0056af211 )
K7GW Trojan ( 0056af211 )
Arcabit Trojan.Generic.D2986102
Cyren W32/MSIL_Kryptik.BMQ.gen!Eldorado
TrendMicro-HouseCall TrojanSpy.MSIL.NEGASTEAL.SMAUJ
Avast Win32:MalwareX-gen [Trj]
Kaspersky HEUR:Trojan.MSIL.Crypt.gen
BitDefender Trojan.GenericKD.43540738
NANO-Antivirus Trojan.Win32.Crypt.hoiebi
AegisLab Trojan.Multi.Generic.4!c
Ad-Aware Trojan.GenericKD.43540738
Sophos Mal/Generic-R + Troj/MSIL-PKO
Comodo Malware@#68031amoap3u
F-Secure Trojan.TR/AD.Tefosteal.cyuui
DrWeb Trojan.Siggen9.60237
VIPRE Trojan.Win32.Generic!BT
TrendMicro TrojanSpy.MSIL.NEGASTEAL.SMAUJ
McAfee-GW-Edition Fareit-FXO!42D49FBEC699
Emsisoft Trojan.GenericKD.43540738 (B)
Avira TR/AD.Tefosteal.cyuui
MAX malware (ai score=84)
Antiy-AVL Trojan/MSIL.Crypt
Gridinsoft SUSP.Encoded_EXE.bot!yf
Microsoft Trojan:MSIL/AgentTesla.AR!MTB
ZoneAlarm HEUR:Trojan.MSIL.Crypt.gen
GData Trojan.GenericKD.43540738
Cynet Malicious (score: 85)
AhnLab-V3 Trojan/Win32.MSIL.R345483
ALYac Trojan.GenericKD.34202350
VBA32 TScope.Trojan.MSIL
ESET-NOD32 a variant of MSIL/Kryptik.WYG
Tencent Msil.Trojan.Crypt.Wopv
Ikarus Trojan.MSIL.Inject
Fortinet MSIL/Kryptik.WYG!tr
AVG Win32:MalwareX-gen [Trj]
Panda Trj/GdSda.A
Qihoo-360 Win32/Trojan.c96
可视化分析
二进制图像
暂无二进制图像 该样本未生成二进制可视化图像
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手，可以帮您分析和解读恶意软件报告。请随时向我提问！

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖
No static analysis available.

Hosts

No hosts contacted.

TCP

Source Source Port Destination Destination Port
113.16.209.193 443 192.168.56.101 49180

UDP

Source Source Port Destination Destination Port
192.168.56.101 49713 114.114.114.114 53
192.168.56.101 50002 114.114.114.114 53
192.168.56.101 51378 114.114.114.114 53
192.168.56.101 53657 114.114.114.114 53
192.168.56.101 60384 114.114.114.114 53
192.168.56.101 137 192.168.56.255 137
192.168.56.101 123 20.189.79.72 time.windows.com 123
192.168.56.101 49235 224.0.0.252 5355
192.168.56.101 50534 224.0.0.252 5355
192.168.56.101 51808 224.0.0.252 5355
192.168.56.101 51963 224.0.0.252 5355
192.168.56.101 53237 224.0.0.252 5355
192.168.56.101 56804 224.0.0.252 5355
192.168.56.101 62191 224.0.0.252 5355
192.168.56.101 62318 224.0.0.252 5355
192.168.56.101 63429 224.0.0.252 5355
192.168.56.101 1900 239.255.255.250 1900
192.168.56.101 50539 239.255.255.250 1900
192.168.56.101 51809 239.255.255.250 3702
192.168.56.101 58707 239.255.255.250 3702

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.