Search

report is generated via an automated analysis system. TrojanDownloader:Win32/Renos.DZ (Microsoft); Generic Dropper.cx (McAfee); Trojan Horse (Symantec); Trojan.Win32.Agent.bnqe (Kaspersky);

(Microsoft); Generic PWS.y!1kh (McAfee); Infostealer (Symantec); Trojan.Win32.Generic!BT (Sunbelt)

%\cewmau.exe This report is generated via an automated analysis system. VirTool:Win32/VBInject.gen!FA (Microsoft); Generic Dropper!cvk (McAfee); W32.IRCBot (Symantec); Trojan-Dropper.Win32.VB.amgq

to the following possibly malicious URL: http://{BLOCKED}2.112.7:8080/{random path} This report is generated via an automated analysis system. TrojanDownloader:Win32/Kuluoz.B (Microsoft); Generic

when applying appropriate DPI and/or IDF rules. 1000552| 1000552 - Generic Cross Site Scripting(XSS) Prevention

Description Name: CVE-2017-0145 - Remote Code Execution - SMB (Request) . This is the Trend Micro detection for malicious SMB network packet that manifest any of the following actions:ExploitThis attack is used for Point of Entry or Lateral Movement

Description Name: CVE-2017-0147 - Information Disclosure Exploit - SMB (Request) . This is the Trend Micro detection for malicious SMB network packet that manifest any of the following actions:ExploitThis attack is used for Point of Entry or Lateral ...

executed copy of itself This report is generated via an automated analysis system. Rogue:Win32/Winwebsec (Microsoft); Generic FakeAlert.ama (McAfee); Packed.Generic.322 (Symantec);

}laod.info/rsss/index.php?{random characters} This report is generated via an automated analysis system. PWS:Win32/Yamoz.A (Microsoft); Generic PWS.y!bml (McAfee); Trojan Horse (Symantec); Trojan-PSW.Win32.Agent.ojk

to the following possibly malicious URL: http://{BLOCKED}189.234:8080/{random path} This report is generated via an automated analysis system. TrojanDownloader:Win32/Kuluoz.B (Microsoft); Generic

}a.net/080210/xia.exe This report is generated via an automated analysis system. TrojanDownloader:Win32/VB.LK (Microsoft); Generic Downloader.s (McAfee); Downloader (Symantec); Trojan-Downloader.Win32.VB.dna (Kaspersky);

!C (Microsoft); Generic Obfuscated.g (McAfee); PUA.Gen.2 (Symantec); Trojan.Win32.Generic.pak!cobra (Sunbelt)

(Microsoft); Generic PWS.ahb (McAfee); Trojan-PSW.Win32.Tepfer.cger (Kaspersky); Trojan.Win32.Generic!BT (Sunbelt)

{BLOCKED}e.co.kr/bXN3aW5zY2sub2N4.ocx This report is generated via an automated analysis system. Backdoor:Win32/Blohi.B (Microsoft); Generic BackDoor!fhr (McAfee); Trojan.Gen (Symantec);

automated analysis system. Trojan:Win32/Matsnu!rfn (Microsoft); Generic BackDoor.u (McAfee); Trojan.Zbot (Symantec); Backdoor.Win32.Matsnu.db (Kaspersky); Troj/Agent-ANGK (Sophos); Trojan.Win32.Generic!BT

Foundation Apache HTTP Server 2.2.6 Apply associated Trend Micro DPI Rules. 1000552| 1000552 - Generic Cross Site Scripting(XSS) Prevention

through your browser. No installation or download is required. Apache 1.3.x,Apache 2.0.x,Apache 2.2.x Apply associated Trend Micro DPI Rules. 1000552| 1000552 - Generic Cross Site Scripting(XSS) Prevention

filter name when applying appropriate DPI and/or IDF rules. 1000552| 1000552 - Generic Cross Site Scripting(XSS) Prevention

Trojan drops the following files: {malware file path and name} This report is generated via an automated analysis system. Generic Trojan.kj (McAfee); W97M.Downloader (Symantec);

when irc is idle %Windows%\Temp\Cookies\control.ini %Windows%\Temp\Cookies\fullname.txt - list of possible fullnames to be used in connect dialog %Windows%\Temp\Cookies\grup - used to create a random