1.8
低危

c5781a62226cb297e243f72ad90d312f16917c994feca587546f69a81c220d39

80f00fb032e335f8df0eb93fb65fbdee.exe

分析耗时

3s

最近分析

文件大小

498.5KB
静态报毒 动态报毒 100% AGENSLA AGENTTESLA AI SCORE=83 AUTO CONFIDENCE ELDORADO FAREIT FROPI FU0@AKX7Q GENERICKD GENKRYPTIK HEAPOVERRIDE HIGH CONFIDENCE KRYPT KRYPTIK MALICIOUS PE MALWAREX NOON OCCAMY R339082 SCORE UNSAFE YAKBEEXMSIL ZEMSILF 更多
鹰眼引擎
未检测 暂无鹰眼引擎检测结果
静态判定
反病毒引擎
查杀引擎 查杀结果 查杀时间 查杀版本
McAfee Fareit-FUC!80F00FB032E3 20200706 6.0.6.653
Alibaba 20190527 0.3.0.5
Baidu 20190318 1.0.0.2
Avast Win32:MalwareX-gen [Trj] 20200706 18.4.3895.0
Tencent Win32.Trojan.Inject.Auto 20200706 1.0.0.1
Kingsoft 20200706 2013.8.14.323
CrowdStrike win/malicious_confidence_100% (W) 20190702 1.0
行为判定
动态指标
The binary likely contains encrypted or compressed data indicative of a packer (2 个事件)
entropy 7.9995754681148155 section {'size_of_data': '0x0006e800', 'virtual_address': '0x00002000', 'entropy': 7.9995754681148155, 'name': '#e(L{/r\\x0f', 'virtual_size': '0x0006e67c'} description A section with a high entropy has been found
entropy 0.8884422110552764 description Overall entropy of this PE file is high
网络通信
File has been identified by 52 AntiVirus engines on VirusTotal as malicious (50 out of 52 个事件)
MicroWorld-eScan Trojan.GenericKD.43272356
FireEye Generic.mg.80f00fb032e335f8
CAT-QuickHeal Trojan.YakbeexMSIL.ZZ4
McAfee Fareit-FUC!80F00FB032E3
Cylance Unsafe
Zillya Trojan.Agensla.Win32.2416
K7AntiVirus Trojan ( 00567d951 )
K7GW Trojan ( 00567d951 )
Cybereason malicious.f87f60
Arcabit Trojan.Generic.D29448A4
Invincea heuristic
F-Prot W32/MSIL_Kryptik.ATX.gen!Eldorado
Symantec Trojan Horse
APEX Malicious
Paloalto generic.ml
Kaspersky HEUR:Trojan-PSW.MSIL.Agensla.gen
BitDefender Trojan.GenericKD.43272356
AegisLab Trojan.MSIL.Agensla.i!c
Avast Win32:MalwareX-gen [Trj]
Tencent Win32.Trojan.Inject.Auto
Ad-Aware Trojan.GenericKD.43272356
Emsisoft Trojan.GenericKD.43272356 (B)
F-Secure Trojan.TR/Kryptik.fropi
VIPRE Trojan.Win32.Generic!BT
TrendMicro TrojanSpy.MSIL.NOON.SMA.hp
Sophos Mal/Generic-S
SentinelOne DFI - Malicious PE
Cyren W32/MSIL_Kryptik.ATX.gen!Eldorado
Avira TR/Kryptik.fropi
Antiy-AVL Trojan[PSW]/MSIL.Agensla
Microsoft Trojan:Win32/Occamy.CC5
Endgame malicious (high confidence)
ViRobot Trojan.Win32.Z.Kryptik.510464.G
ZoneAlarm HEUR:Trojan-PSW.MSIL.Agensla.gen
GData Trojan.GenericKD.43272356
Cynet Malicious (score: 100)
AhnLab-V3 Trojan/Win32.Agensla.R339082
Acronis suspicious
BitDefenderTheta Gen:NN.ZemsilF.34130.Fu0@aKx7Q!o
ALYac Trojan.GenericKD.43272356
MAX malware (ai score=83)
VBA32 CIL.HeapOverride.Heur
Malwarebytes Spyware.AgentTesla
ESET-NOD32 a variant of MSIL/Kryptik.WDE
TrendMicro-HouseCall TrojanSpy.MSIL.NOON.SMA.hp
Ikarus Trojan.MSIL.Krypt
eGambit Unsafe.AI_Score_99%
Fortinet MSIL/GenKryptik.417E!tr
AVG Win32:MalwareX-gen [Trj]
Panda Trj/Agent.JMA
可视化分析
二进制图像
暂无二进制图像 该样本未生成二进制可视化图像
运行截图
暂无运行截图 该样本运行过程中未生成截图

👋 欢迎使用 ChatHawk

我是您的恶意软件分析助手,可以帮您分析和解读恶意软件报告。请随时向我提问!

🔍 主要威胁分析
⚡ 行为特征
🛡️ 防护建议
🔧 技术手段
🎯 检测方法
🤖

PE Compile Time

2020-06-02 15:38:54

Imports

Library mscoree.dll:
0x484000 _CorExeMain

Hosts

No hosts contacted.

DNS

No domains contacted.

TCP

No TCP connections recorded.

UDP

No UDP connections recorded.

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.