| A | B | C | D | E | F | G | H | I | J | K | L | M | N | O | P | Q | R | S | T | U | V | W | X | Y | Z | AA | AB | |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
1 | Rule | Positives | Virus | File Names | First Submitted | Last Submitted | File Type | MD5 | SHA1 | SHA256 | Imphash | Hybrid Analysis Sample | MalShare Sample | VirusBay Sample | MISP | URLhaus | AnyRun | CAPE | Microsoft | Kaspersky | McAfee | CrowdStrike | TrendMicro | ESET-NOD32 | Symantec | F-Secure | Sophos | GData |
2 | APT_Backdoor_Win_DShell_2 | 43 | Microsoft: Trojan:Win32/Ymacco.AB74 / Kaspersky: Trojan.Win32.Miner.asvgn / McAfee: GenericRXLN-JT!024670C69003 / ESET-NOD32: a variant of Generik.LIFCYUI / Symantec: ML.Attribute.HighConfidence / F-Secure: Trojan.TR/Miner.kjvwm / Sophos: Mal/Generic-S / GData: Trojan.GenericKD.34158395 | Program.exe, start.exe | 7/12/20 3:58 | 7/12/20 3:58 | Win32 EXE | 024670c69003ff85995afc5931d6b2f5 | cda70d53043a32dbddceb163ad44b2a6c1d1a8ae | 747941f972e786f9a93c809247dc776d1fe348e004b1c087683756ae48acfdfe | 82d294e9a45a6f7945980bf1d4d94e3c | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Ymacco.AB74 | Trojan.Win32.Miner.asvgn | GenericRXLN-JT!024670C69003 | - | - | a variant of Generik.LIFCYUI | ML.Attribute.HighConfidence | Trojan.TR/Miner.kjvwm | Mal/Generic-S | Trojan.GenericKD.34158395 |
3 | APT_Backdoor_Win_DShell_2 | 13 | Kaspersky: Trojan.Win64.Shelma.bbi / McAfee: Artemis!7306BCE6A6A5 | DAO.exe | 4/12/19 9:45 | 4/12/19 9:45 | Win32 EXE | 7306bce6a6a56e7d2bc8c373e0b53319 | 51ca464b3f1cb3d9973c6cfdde30abdcb095154a | 4647ead22996882f3e17104040605473309f460d4f8d00f07395de89d81a039c | 8cebc8d46e3ba5d16d8917db51ff3f33 | FALSE | FALSE | FALSE | FALSE | FALSE | TRUE | FALSE | - | Trojan.Win64.Shelma.bbi | Artemis!7306BCE6A6A5 | - | - | - | - | - | - | - |
4 | APT_Backdoor_Win_DShell_2 | 3 | - | dub.exe | 9/16/20 9:06 | 9/16/20 9:06 | Win32 EXE | 6065e2888e1d8dc6716cde626a7011ae | a0e595ac60dd5d5572af8a52288f430381112ade | a6834eb32f20a52786ce1c5e99b94baec4d251414a97ca4717b2b06c88340a4b | e981edb7342e4a2d56649c7150753942 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | - | - | - | - | - | - | - | - | - | - |
5 | APT_Backdoor_Win_DShell_2 | 2 | CrowdStrike: win/malicious_confidence_60% (W) | compilador.exe | 11/5/20 18:36 | 11/5/20 18:36 | Win32 EXE | b9c7deb0d1783c971f7eb9d08ad9c8c8 | c453f07cd80fa3730e925c17a788c6861d86a455 | 2b4d48aac9c6885f50f5f95c10385aa10f7de9c8f393e64777b544e8fae8c95b | 1a82350b4a4636c8fd3efae2a7d9dc31 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | - | - | win/malicious_confidence_60% (W) | - | - | - | - | - | - | - |
6 | APT_Backdoor_Win_DShell_2 | 2 | - | dub.exe | 4/22/19 10:18 | 4/22/19 10:18 | Win32 EXE | 07ada342dcdc48d1ffa28b5520604826 | 84c2663de835b3883d9da4d1dc345c41ba53a04f | 5e53ce8f7f5f0b9c85bcb15becc5ae4ce9f8fc01504e76deaafbf70ffa1cda9d | 0eec948dbeb009385cc37d60cbe52429 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | [] | ['-'] | - | - | - | - | - | - | - | - | |
7 | APT_Backdoor_Win_DShell_2 | 2 | - | dman.exe | 12/20/17 7:27 | 12/20/17 7:27 | Win32 EXE | 9eeb9f134c061220e0cfbab357dab36e | b18e8267e77c8e9e05169a414f4aa6f08521038d | 6500e845c478dc26d950b913da2fb85d6b180275827737062f23c8671b2cbd0e | 5f9a04675372353d41e3bb543e755e50 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | - | - | - | - | - | - | - | - | - | - |
8 | APT_Backdoor_Win_DShell_2 | 1 | - | dhcptest-0.6-win32.exe | 11/26/20 10:25 | 11/26/20 10:25 | Win32 EXE | 34d15c627c281326921d33568fcbba84 | e7eeacbc275ca08fa4683ce99880f00ffd3d2b75 | c32514711f72002e9a540c2434dee7b239485d01a95a7530b939fed43f277f6d | 3a39d3938ef35d78c4b6151cd1d2815f | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | [] | ['-'] | - | - | - | - | - | - | - | - | |
9 | APT_Backdoor_Win_DShell_2 | 1 | - | bootstrap.exe | 10/23/20 23:20 | 10/23/20 23:20 | Win32 EXE | f22bc9b65217e2d1d8bbd0819d16a6ee | 9fbce4d68c6715c6d604719c9bd89fdb32e7bf2a | 77dedb037985896646ee3a65687dca17f669750133893209ea765c991a2c39a0 | 4977422e2fad736ff259a9bc3d37be54 | FALSE | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | - | - | - | - | - | - | - | - | - | - |
10 | APT_Backdoor_Win_DShell_2 | 1 | - | PostKiss.exe | 11/9/20 14:31 | 11/9/20 14:31 | Win32 EXE | b72e30801f6ab1a299bf807c665c9476 | 03f92afa9826c226933b399bdb20f4af7eaea0fc | 0c55581575708818bd5b58cd9647f1112f97a921f36227d4fe512e710e0a0dbf | d65c6923348712e8919b52cc89815e09 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | - | - | - | - | - | - | - | - | - | - |
11 | APT_Backdoor_Win_DShell_2 | 0 | - | - | - | - | - | - | 37e5cc3591f906004558b3c37efef76455805ec1 | - | - | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | - | - | - | - | - | - | - | - | - | - |
12 | APT_Backdoor_Win_DShell_2 | 0 | - | dub.exe | 12/20/17 7:27 | 12/20/17 7:27 | Win32 EXE | 6ebb5608a16db021118e328828dfd345 | 2a04c87bbcd154ce7ea2e46e76b7316b95395e6e | 225d4be8f66361b82dd89fc14496a1ebe37049c1930672dde2ccb6aab068aff1 | d81a8f2bacc77328b2262093f3464e20 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | - | - | - | - | - | - | - | - | - | - |
13 | APT_Backdoor_Win_DShell_2 /subfile | 7 | Microsoft: Trojan:Win32/Wacatac.B!ml | Direct HTTP Tunnel.exe, Direct HTTP Tunnel v1.0.0.exe | 3/12/20 3:44 | 3/12/20 3:44 | Win32 EXE | f4a4c34ce46490fec6ce00fedd1a4091 | 48537f6768c85331a33aad1015df521d0a4611b8 | 94f7fe4c70accd4991b203a981cac2925e84d3d984c3b50184a4341b8c0e37c5 | f592e4dc4785088564b5a90c26124546 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Wacatac.B!ml | - | - | - | - | - | - | - | - | - |
14 | APT_Backdoor_Win_DShell_3 | 46 | Microsoft: Trojan:Win32/Occamy.C / Kaspersky: Trojan.Win64.Shelma.cwt / McAfee: Artemis!263A9B181637 / CrowdStrike: win/malicious_confidence_100% (W) / TrendMicro: TROJ_GEN.R011C0WAA20 / ESET-NOD32: a variant of Win32/Kryptik.HAAV / Symantec: ML.Attribute.HighConfidence / Sophos: Mal/Generic-S / GData: Gen:Variant.Razy.526582 | g.exe | 1/7/20 21:52 | 1/7/20 21:52 | Win32 EXE | 263a9b181637c674a18c7aef59e04da9 | fb8a367eb4d3f2cf1dcb778aa4d0e5481c36523b | 26306ab77019986347a8a8fcd82a7851befffc5db606f8f61b1144dea4830852 | 8cebc8d46e3ba5d16d8917db51ff3f33 | TRUE | TRUE | FALSE | FALSE | FALSE | TRUE | FALSE | Trojan:Win32/Occamy.C | Trojan.Win64.Shelma.cwt | Artemis!263A9B181637 | win/malicious_confidence_100% (W) | TROJ_GEN.R011C0WAA20 | a variant of Win32/Kryptik.HAAV | ML.Attribute.HighConfidence | - | Mal/Generic-S | Gen:Variant.Razy.526582 |
15 | APT_Backdoor_Win_DShell_3 | 42 | Microsoft: VirTool:Win32/Atosev.A / Kaspersky: Trojan.Win32.Diple.hsqr / McAfee: Artemis!69EC0F3162AF / TrendMicro: TROJ_GEN.R002C0WKE20 / Symantec: ML.Attribute.HighConfidence / F-Secure: Trojan.TR/Diple.bfsbw / GData: Gen:Variant.Razy.526582 | 69ec0f3162afb4e200da5267d7a36ef0.virus | 11/12/20 13:20 | 11/20/20 1:13 | Win32 EXE | 69ec0f3162afb4e200da5267d7a36ef0 | 88bfe088df4ff0e04dca86005c78b47513926272 | 7904aafb08dba1c7f99fbad637497da039fb4fd58a889de57fbb75b8749b7030 | 8cebc8d46e3ba5d16d8917db51ff3f33 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | VirTool:Win32/Atosev.A | Trojan.Win32.Diple.hsqr | Artemis!69EC0F3162AF | - | TROJ_GEN.R002C0WKE20 | - | ML.Attribute.HighConfidence | Trojan.TR/Diple.bfsbw | - | Gen:Variant.Razy.526582 |
16 | APT_Backdoor_Win_GoRat_Memory | 0 | - | - | - | - | - | - | fd0c09db9044c7c796f897d2e40c60ac2c31148b | - | - | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | - | - | - | - | - | - | - | - | - | - |
17 | APT_Backdoor_Win_GoRat_Memory | 0 | - | - | - | - | - | - | f5cb014391dabc7674c52766b6db2fe85ebf6bd8 | - | - | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | - | - | - | - | - | - | - | - | - | - |
18 | APT_Backdoor_Win_GoRat_Memory | 0 | - | - | - | - | - | - | 28c1d90772c99503f782c13ab1770e1f327645b9 | - | - | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | - | - | - | - | - | - | - | - | - | - |
19 | APT_Backdoor_Win_GoRat_Memory | 0 | - | - | - | - | - | - | 38e411faa613985e1c3c593000e31419b87e4ecc | - | - | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | - | - | - | - | - | - | - | - | - | - |
20 | APT_Backdoor_Win_GoRat_Memory | 0 | - | zinixlogs | 9/12/20 5:25 | 9/12/20 5:25 | unknown | b72b3615f07f55b83b0201d32c8557ee | bc2e99eda1490f67dc9e65a58cebe170069bc368 | 1381107c1f473b3dce170356158be445afc76ec3c0661d8429ef1f5a591e76f0 | - | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | - | - | - | - | - | - | - | - | - | - |
21 | APT_Backdoor_Win_GoRat_Memory | 0 | - | - | - | - | - | - | 0b9b9d9be6c0eba85aa77f7f5de09f4bc7d4143d | - | - | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | - | - | - | - | - | - | - | - | - | - |
22 | APT_Backdoor_Win_GoRat_Memory | 0 | - | com.dontbelievethebyte.sk1pshuffle, skipshuffle-release-9021.apk | 7/24/19 12:47 | 8/10/20 13:09 | Android | 618e30a0f5aa6119ea7687399227e776 | c9811714bf9955223e4af13959165fe08fa53cc9 | 39845d02f72d83ef342b62b7348776d44cdb3eb6416b83ea2167b301d306cd58 | - | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | - | - | - | - | - | - | - | - | - | - |
23 | APT_Builder_PY_REDFLARE_1 | 0 | - | - | - | - | - | - | 4caa9779f200ec41d5ac389871641b7076e2793c | - | - | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | - | - | - | - | - | - | - | - | - | - |
24 | APT_HackTool_MSIL_ADPassHunt_1 | 0 | - | - | - | - | - | - | 590bd7609edf9ea8dab0b5fbc38393a870b329de | - | - | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | - | - | - | - | - | - | - | - | - | - |
25 | APT_HackTool_MSIL_FLUFFY_2 | 0 | - | - | - | - | - | - | 8bebf19d54c749560301eaada2e92eb240501b8c | - | - | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | - | - | - | - | - | - | - | - | - | - |
26 | APT_HackTool_MSIL_MODIFIEDSHARPVIEW_1 | 34 | Microsoft: VirTool:MSIL/Menace.C!MTB / McAfee: GenericRXLM-TO!D6A69F04E874 / TrendMicro: TROJ_GEN.R002C0DKK20 / Symantec: ML.Attribute.HighConfidence / Sophos: Mal/Generic-S / GData: Gen:Variant.Razy.718419 | SharpView.exe | 11/20/20 16:40 | 11/20/20 16:40 | Win32 EXE | d6a69f04e8747428f7dab5b03b50e7fa | 8eaab277dc9e5f223c424b4231932e87754fd355 | a147b58b5e03979a017daf3f32d666b8f0b8a1f53617a3b0244107e231e1c2b9 | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | VirTool:MSIL/Menace.C!MTB | - | GenericRXLM-TO!D6A69F04E874 | - | TROJ_GEN.R002C0DKK20 | - | ML.Attribute.HighConfidence | - | Mal/Generic-S | Gen:Variant.Razy.718419 |
27 | APT_HackTool_MSIL_MODIFIEDSHARPVIEW_1 | 32 | Microsoft: VirTool:MSIL/Menace.C!MTB / McAfee: Artemis!C7BA98E66673 / TrendMicro: TROJ_GEN.R002C0DJV20 / Symantec: ML.Attribute.HighConfidence / F-Secure: Trojan.TR/Redcap.obnoh / Sophos: Mal/Generic-S / GData: Gen:Variant.Razy.718419 | SharpView.exe | 10/28/20 15:48 | 10/28/20 15:48 | Win32 EXE | c7ba98e66673f9404f680e14d625eb3e | 22de7e63cfbdc71e287972608aeed22e67816d29 | 6abd0d4b5ac62b11385d7a6ca3ed9f2cd513499cdf414b9688ed3e1116380d10 | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | VirTool:MSIL/Menace.C!MTB | - | Artemis!C7BA98E66673 | - | TROJ_GEN.R002C0DJV20 | - | ML.Attribute.HighConfidence | Trojan.TR/Redcap.obnoh | Mal/Generic-S | Gen:Variant.Razy.718419 |
28 | APT_HackTool_MSIL_MODIFIEDSHARPVIEW_1 | 31 | McAfee: Artemis!6FFAA9B13EF9 / CrowdStrike: win/malicious_confidence_100% (W) / Symantec: ML.Attribute.HighConfidence / GData: Trojan.GenericKD.43929564 | SharpView.exe, SharpViewNetShrink.exe | 9/29/20 14:38 | 9/29/20 14:38 | Win32 EXE | 6ffaa9b13ef9def7f7851b8aa8000deb | 01a7705bbee8facd72a2597382035a31128f6253 | 39e7b3915cf52ed0127a590c5baa52c475bd6466abfcd39015e119c3fdf1befc | f34d5f2d4577ed6d9ceec516c1f5a744 | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | - | - | Artemis!6FFAA9B13EF9 | win/malicious_confidence_100% (W) | - | - | ML.Attribute.HighConfidence | - | - | Trojan.GenericKD.43929564 |
29 | APT_HackTool_MSIL_MODIFIEDSHARPVIEW_1 | 28 | Microsoft: VirTool:MSIL/Menace.C!MTB / McAfee: Artemis!42ED6E6CC778 / Symantec: ML.Attribute.HighConfidence / F-Secure: Trojan.TR/Redcap.ujfma / GData: Gen:Variant.Razy.718419 | SharpView.exe | 10/12/20 22:51 | 10/21/20 21:06 | Win32 EXE | 42ed6e6cc7783a964c9233194c0ddcf1 | 763404b556af0791ffe24014715183bbbec5dbb5 | bdbf070ecd2f97ceba1817e03f76b1334819bb1528ea0b55a46ac3f4cbdc28e9 | f34d5f2d4577ed6d9ceec516c1f5a744 | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | VirTool:MSIL/Menace.C!MTB | - | Artemis!42ED6E6CC778 | - | - | - | ML.Attribute.HighConfidence | Trojan.TR/Redcap.ujfma | - | Gen:Variant.Razy.718419 |
30 | APT_HackTool_MSIL_MODIFIEDSHARPVIEW_1 | 27 | Microsoft: VirTool:MSIL/Broil.D!MTB / McAfee: Artemis!6209EDE16563 / TrendMicro: TROJ_GEN.R002C0DKE20 / Symantec: ML.Attribute.HighConfidence / GData: Gen:Variant.Razy.718419 | View.exe | 11/12/20 6:11 | 11/12/20 6:11 | Win32 EXE | 6209ede165635859acb395148c0755a4 | 8ec6fedc9ac60ee42ca93cc0aebfa55f572a1473 | 930118c9852cc6e7476de1d81d76c403baeb896922289556366a2c0825d4ef7f | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | VirTool:MSIL/Broil.D!MTB | - | Artemis!6209EDE16563 | - | TROJ_GEN.R002C0DKE20 | - | ML.Attribute.HighConfidence | - | - | Gen:Variant.Razy.718419 |
31 | APT_HackTool_MSIL_MODIFIEDSHARPVIEW_1 | 24 | Microsoft: VirTool:MSIL/Menace.C!MTB / McAfee: GenericRXLM-TO!C41491ABF73C / TrendMicro: TROJ_GEN.R002C0TIE20 / Symantec: ML.Attribute.HighConfidence / GData: Gen:Variant.Razy.718419 | SharpView.exe | 3/21/20 23:59 | 3/21/20 23:59 | Win32 EXE | c41491abf73cc37ccc2068914442263d | 952a9db84c4ad14d1409248c1be9aa8f71a0eaa5 | 252b76fb947e6cdd7fc2aec36111d666f6a0627694e737e48b8168776feb528c | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | VirTool:MSIL/Menace.C!MTB | - | GenericRXLM-TO!C41491ABF73C | - | TROJ_GEN.R002C0TIE20 | - | ML.Attribute.HighConfidence | - | - | Gen:Variant.Razy.718419 |
32 | APT_HackTool_Win64_EXCAVATOR_1 | 20 | Microsoft: HackTool:Win64/InfoStealer!MSR / Kaspersky: UDS:DangerousObject.Multi.Generic / McAfee: HackTool-Leak.c!6A9A11492855 / Symantec: Trojan.Gen.2 / Sophos: Generic PUA MM (PUA) / GData: Application.Agent.JJB | 6a9a114928554c26675884eeb40cc01b.virus | 12/2/20 16:26 | 12/2/20 16:26 | Win32 DLL | 6a9a114928554c26675884eeb40cc01b | cc542c0f873470b3eb292f082771eec61c16b3d7 | efb533249f71ea6ebfb6418bb67c94e8fbd5f2a26cbd82ef8ec1d30c0c90c6c1 | a4f8184a33fb394de6df39ab5d91182e | TRUE | TRUE | FALSE | FALSE | FALSE | TRUE | FALSE | HackTool:Win64/InfoStealer!MSR | UDS:DangerousObject.Multi.Generic | HackTool-Leak.c!6A9A11492855 | - | - | - | Trojan.Gen.2 | - | Generic PUA MM (PUA) | Application.Agent.JJB |
33 | APT_HackTool_Win64_EXCAVATOR_1 | 9 | CrowdStrike: win/malicious_confidence_100% (W) / GData: Application.Agent.JJA | fe511ad15d9dfd1c8981128d7f969437.virus | 12/2/20 16:25 | 12/2/20 16:25 | Win32 EXE | fe511ad15d9dfd1c8981128d7f969437 | 4ab07e70ec0f72b9c58b9520adfef35882938acf | 27a5e3795e150eb9d3af99a654be7d9a684983c0bbccc9ba0b4efa4301404760 | 38a6f511f6024c137f29635d3b34be06 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | - | - | - | win/malicious_confidence_100% (W) | - | - | - | - | - | Application.Agent.JJA |
34 | APT_HackTool_Win64_EXCAVATOR_1 | 8 | GData: Application.Agent.JJC | b2c06c23f55abaae7fa52591c5fb6e12.virus | 12/2/20 16:26 | 12/2/20 16:26 | Win32 DLL | b2c06c23f55abaae7fa52591c5fb6e12 | 61e29f370a11f9031406b95f5c462427f89c14e7 | 31d06aa9ceb13c28b6af76d6b5cc33dc14c59e4496c9265cee60cbad3d89b863 | 563c2e508fa8524fae542535468397ed | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | - | - | - | - | - | - | - | - | - | Application.Agent.JJC |
35 | APT_Loader_MSIL_PGF_1 | 49 | Microsoft: HackTool:Win32/Atosev.A / Kaspersky: HEUR:Trojan.MSIL.Cometer.gen / McAfee: Artemis!445BE3F122E9 / CrowdStrike: win/malicious_confidence_100% (D) / TrendMicro: TROJ_GEN.R002C0WKT20 / Symantec: ML.Attribute.HighConfidence / F-Secure: Trojan.TR/Dropper.Gen / Sophos: Mal/Generic-S (PUA) / GData: Trojan.Agent.EZMH | csharpexe_virtualallocsetthreadcontext_x86_base.exe, csharpexe_virtualallocsetthreadcontext_x86_base, 445be3f122e96867ea6a5e2930f6d880.virus | 11/26/20 12:32 | 11/26/20 12:32 | Win32 EXE | 445be3f122e96867ea6a5e2930f6d880 | 97023ce3868444f6b81f06a224ef4876828ae6ab | 1208a9fcee5cf7522676427a7b8ceb6d49f7fcb6295f759b8cda0c3b3066a7e1 | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | HackTool:Win32/Atosev.A | HEUR:Trojan.MSIL.Cometer.gen | Artemis!445BE3F122E9 | win/malicious_confidence_100% (D) | TROJ_GEN.R002C0WKT20 | - | ML.Attribute.HighConfidence | Trojan.TR/Dropper.Gen | Mal/Generic-S (PUA) | Trojan.Agent.EZMH |
36 | APT_Loader_MSIL_PGF_1 | 47 | Microsoft: Trojan:Win32/Wacatac.B!ml / Kaspersky: UDS:DangerousObject.Multi.Generic / McAfee: Artemis!9CCEABE93DA0 / CrowdStrike: win/malicious_confidence_100% (D) / ESET-NOD32: a variant of MSIL/Injector.UQD / Symantec: ML.Attribute.HighConfidence / F-Secure: Trojan.TR/Dropper.Gen2 / Sophos: Mal/Generic-S / GData: Trojan.Agent.EZMH | csharpexe_queueuserapc_x86_spawn32.exe, 9cceabe93da096fcd04d072d7e842cb2.virus, csharpexe_queueuserapc_x86_spawn32 | 11/26/20 12:32 | 11/26/20 12:32 | Win32 EXE | 9cceabe93da096fcd04d072d7e842cb2 | bd335a3c807086e5dcb4ddfbc853455b74ea8bd6 | a0d5f287b9b3c0f540d5a59db423b86776a81181f81e14082d7b72ac1d99f8ea | f34d5f2d4577ed6d9ceec516c1f5a744 | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Wacatac.B!ml | UDS:DangerousObject.Multi.Generic | Artemis!9CCEABE93DA0 | win/malicious_confidence_100% (D) | - | a variant of MSIL/Injector.UQD | ML.Attribute.HighConfidence | Trojan.TR/Dropper.Gen2 | Mal/Generic-S | Trojan.Agent.EZMH |
37 | APT_Loader_MSIL_PGF_2 | 54 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / McAfee: RDN/Generic.grp / CrowdStrike: win/malicious_confidence_60% (D) / TrendMicro: TROJ_GEN.R002C0DKK20 / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Trojan.Gen.2 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Generic-R + Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | NnjXvg.exe, NnjXvg | 11/20/20 17:58 | 11/20/20 17:58 | Win32 EXE | f1ecf486d86575326eefe826e202efb7 | 82739c78f7b351bbe80a582fd46b0ba4f1c8c02b | 86313ef291ebc5905837f16a8a99992550f986feca21fdc40f554b674c7298f7 | f34d5f2d4577ed6d9ceec516c1f5a744 | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | RDN/Generic.grp | win/malicious_confidence_60% (D) | TROJ_GEN.R002C0DKK20 | a variant of MSIL/Agent.SPI | Trojan.Gen.2 | Heuristic.HEUR/AGEN.1137595 | Mal/Generic-R + Mal/Swrort-AE | Gen:Variant.Razy.410540 |
38 | APT_Loader_MSIL_PGF_2 | 54 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / McAfee: RDN/Generic.grp / CrowdStrike: win/malicious_confidence_60% (W) / TrendMicro: TROJ_GEN.R002C0DJF20 / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Trojan.Gen.MBT / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Generic-R + Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | OjiTqo.exe, OjiTqo | 10/15/20 18:46 | 10/15/20 18:46 | Win32 EXE | bd50c2a36a9e5903f11f9fcff6b94145 | a5f108cf4f1f40c60465a1234c9660d1ae872d1c | 1a9d041c82423805bc01b4cb1f5c20c5d58ebc4b525fd88553803a2f148ebd8d | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | TRUE | FALSE | FALSE | FALSE | TRUE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | RDN/Generic.grp | win/malicious_confidence_60% (W) | TROJ_GEN.R002C0DJF20 | a variant of MSIL/Agent.SPI | Trojan.Gen.MBT | Heuristic.HEUR/AGEN.1137595 | Mal/Generic-R + Mal/Swrort-AE | Gen:Variant.Razy.410540 |
39 | APT_Loader_MSIL_PGF_2 | 53 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / McAfee: RDN/Generic.grp / CrowdStrike: win/malicious_confidence_60% (D) / TrendMicro: TROJ_GEN.R002C0DKM20 / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Trojan.Gen.MBT / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Generic-R + Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | dPxubx.exe, dPxubx | 11/22/20 18:23 | 11/22/20 18:23 | Win32 EXE | 086110f79152975b4259659b377902ba | c47021b5fc733b1a21e837fd34f849e0559b1ace | ebc16780fe7083af5a9e143b56e0a791115f8b37b83f1bad5bab4828623e1224 | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | RDN/Generic.grp | win/malicious_confidence_60% (D) | TROJ_GEN.R002C0DKM20 | a variant of MSIL/Agent.SPI | Trojan.Gen.MBT | Heuristic.HEUR/AGEN.1137595 | Mal/Generic-R + Mal/Swrort-AE | Gen:Variant.Razy.410540 |
40 | APT_Loader_MSIL_PGF_2 | 53 | Microsoft: Trojan:Win32/Meteremel.B!ml / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / McAfee: RDN/Generic.tfr / CrowdStrike: win/malicious_confidence_80% (W) / TrendMicro: TROJ_GEN.R002C0RJF20 / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Trojan.Gen.MBT / F-Secure: Trojan.TR/Dropper.Gen2 / Sophos: Mal/Generic-R + Mal/Swrort-AE / GData: Gen:Variant.Razy.717378 | CjDGQr.exe, CjDGQr | 10/15/20 18:36 | 10/15/20 18:36 | Win32 EXE | 8ca9a62faf71949ae165f5effd0557d7 | bb438f149cdc65251cb0972b7c84d704c01516eb | 032d1aa450227df5d23cc304009ad2db48b33e78191f464a1acc101807845aa7 | f34d5f2d4577ed6d9ceec516c1f5a744 | TRUE | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meteremel.B!ml | HEUR:Trojan.MSIL.Shelma.gen | RDN/Generic.tfr | win/malicious_confidence_80% (W) | TROJ_GEN.R002C0RJF20 | a variant of MSIL/Agent.SPI | Trojan.Gen.MBT | Trojan.TR/Dropper.Gen2 | Mal/Generic-R + Mal/Swrort-AE | Gen:Variant.Razy.717378 |
41 | APT_Loader_MSIL_PGF_2 | 52 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / McAfee: RDN/Generic.grp / CrowdStrike: win/malicious_confidence_60% (W) / TrendMicro: TROJ_GEN.R049C0DJF20 / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Trojan.Gen.MBT / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Generic-R + Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | ETaPzq.exe, ETaPzq | 10/15/20 19:14 | 10/15/20 19:14 | Win32 EXE | 7cac98df1f9a382a3e3e1a45e8ea357d | 68e7271d994b12802f4112a87641f0ce614e628c | 65e7006479b5be1d094047a201da9a83e3ed424835752c62534bac32a9f3153b | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | RDN/Generic.grp | win/malicious_confidence_60% (W) | TROJ_GEN.R049C0DJF20 | a variant of MSIL/Agent.SPI | Trojan.Gen.MBT | Heuristic.HEUR/AGEN.1137595 | Mal/Generic-R + Mal/Swrort-AE | Gen:Variant.Razy.410540 |
42 | APT_Loader_MSIL_PGF_2 | 52 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / McAfee: RDN/Generic.grp / CrowdStrike: win/malicious_confidence_60% (D) / TrendMicro: TROJ_GEN.R002C0DKL20 / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Trojan.Gen.MBT / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Generic-R + Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | hsOsdP.exe, hsOsdP | 11/21/20 17:34 | 11/21/20 17:34 | Win32 EXE | ffb41e9ffd824784b6ab5f24fabcad14 | f590b00fd30a653a833be42974f9f714d3c8d595 | 24e37e197bdbabf8a2bc63e0776e82c00a440febe171ec1e648f024338c0871c | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | RDN/Generic.grp | win/malicious_confidence_60% (D) | TROJ_GEN.R002C0DKL20 | a variant of MSIL/Agent.SPI | Trojan.Gen.MBT | Heuristic.HEUR/AGEN.1137595 | Mal/Generic-R + Mal/Swrort-AE | Gen:Variant.Razy.410540 |
43 | APT_Loader_MSIL_PGF_2 | 51 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / McAfee: RDN/Generic.grp / CrowdStrike: win/malicious_confidence_60% (W) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Trojan.Gen.MBT / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | SNhtAN.exe, SNhtAN | 10/15/20 20:04 | 10/15/20 20:04 | Win32 EXE | 0340b5641499158ac0d0403d788575db | b09071fb5f678f8429d9a72deb084f6958d71093 | e1a42ea65004088638bd06353c14f85dcb0030e9fb6975425c6916d8f4f36dd3 | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | RDN/Generic.grp | win/malicious_confidence_60% (W) | - | a variant of MSIL/Agent.SPI | Trojan.Gen.MBT | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
44 | APT_Loader_MSIL_PGF_2 | 51 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / McAfee: Artemis!C4AB274B0371 / CrowdStrike: win/malicious_confidence_100% (W) / TrendMicro: TROJ_GEN.R002C0DKC20 / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Trojan.Gen.MBT / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Generic-R + Mal/Swrort-AE / GData: Gen:Variant.Bulz.201155 | bMNvEg.exe, bMNvEg | 11/12/20 16:35 | 11/12/20 16:35 | Win32 EXE | c4ab274b0371084ec4d0c9f9442e6be9 | ec29dd9b3bd00149364774dad01b4fd5e554bd4d | 304ee129a947706c6436d89215034332554cbb30cde833ce1d368d5b4b97eb3b | f34d5f2d4577ed6d9ceec516c1f5a744 | TRUE | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | Artemis!C4AB274B0371 | win/malicious_confidence_100% (W) | TROJ_GEN.R002C0DKC20 | a variant of MSIL/Agent.SPI | Trojan.Gen.MBT | Heuristic.HEUR/AGEN.1137595 | Mal/Generic-R + Mal/Swrort-AE | Gen:Variant.Bulz.201155 |
45 | APT_Loader_MSIL_PGF_2 | 51 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / McAfee: Artemis!96E05F8FB769 / CrowdStrike: win/malicious_confidence_60% (D) / TrendMicro: TROJ_GEN.R002C0DKL20 / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Trojan.Gen.MBT / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Generic-R + Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | etlTMc.exe, etlTMc | 11/21/20 17:38 | 11/21/20 17:38 | Win32 EXE | 96e05f8fb769032feadab36f31b6c6aa | 5179d4d2fb102427e73ccd0cffa54a64405f41fb | 362cbe98c315c8340e9d395ca8f4283677e04cb05ea2ebb1f1d8edd6c6232aea | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | Artemis!96E05F8FB769 | win/malicious_confidence_60% (D) | TROJ_GEN.R002C0DKL20 | a variant of MSIL/Agent.SPI | Trojan.Gen.MBT | Heuristic.HEUR/AGEN.1137595 | Mal/Generic-R + Mal/Swrort-AE | Gen:Variant.Razy.410540 |
46 | APT_Loader_MSIL_PGF_2 | 51 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / McAfee: RDN/Generic.grp / TrendMicro: TROJ_GEN.R002C0DJF20 / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Trojan.Gen.MBT / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Generic-R + Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | ZOaQQr.exe, ZOaQQr | 10/15/20 18:52 | 10/15/20 18:52 | Win32 EXE | 59bfc05922cc04fba8c7f4cf220ba27c | 52c4d73b281f148ba573304edc331197225ad4cc | 2b0ffc2636f48a54e709ab581027689439922a8727ce17ded9986554444acee6 | f34d5f2d4577ed6d9ceec516c1f5a744 | TRUE | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | RDN/Generic.grp | - | TROJ_GEN.R002C0DJF20 | a variant of MSIL/Agent.SPI | Trojan.Gen.MBT | Heuristic.HEUR/AGEN.1137595 | Mal/Generic-R + Mal/Swrort-AE | Gen:Variant.Razy.410540 |
47 | APT_Loader_MSIL_PGF_2 | 51 | Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / McAfee: RDN/Generic.grp / CrowdStrike: win/malicious_confidence_100% (W) / TrendMicro: TROJ_GEN.R049C0DJF20 / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Trojan.Gen.MBT / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Generic-R + Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | fsbBMl.exe, fsbBMl | 10/15/20 19:41 | 10/15/20 19:41 | Win32 EXE | 6aa5a7cb62a32e13b36f66a30de55f64 | 0428afec8338205a4932f1ed0c37576ba05c273a | a80bc4f464220b1adbcf70c310e061d87591a7fb56595ba91afdfcac11b0978c | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | - | HEUR:Trojan.MSIL.Shelma.gen | RDN/Generic.grp | win/malicious_confidence_100% (W) | TROJ_GEN.R049C0DJF20 | a variant of MSIL/Agent.SPI | Trojan.Gen.MBT | Heuristic.HEUR/AGEN.1137595 | Mal/Generic-R + Mal/Swrort-AE | Gen:Variant.Razy.410540 |
48 | APT_Loader_MSIL_PGF_2 | 51 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / McAfee: RDN/Generic.grp / CrowdStrike: win/malicious_confidence_60% (W) / TrendMicro: TROJ_GEN.R002C0DJF20 / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Trojan.Gen.MBT / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Generic-R + Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | ZIQpyS.exe, ZIQpyS | 10/15/20 18:37 | 10/15/20 18:37 | Win32 EXE | e78cfa3c8c63eff71020f4f709321a2e | 16d19b150178d0ed07dead258cc516e0c5b422eb | 05810f2a6d5ed4ce5687bfa80285b796d5edb446404b017856e73660547ab23c | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | RDN/Generic.grp | win/malicious_confidence_60% (W) | TROJ_GEN.R002C0DJF20 | a variant of MSIL/Agent.SPI | Trojan.Gen.MBT | Heuristic.HEUR/AGEN.1137595 | Mal/Generic-R + Mal/Swrort-AE | Gen:Variant.Razy.410540 |
49 | APT_Loader_MSIL_PGF_2 | 51 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / McAfee: RDN/Generic.dx / CrowdStrike: win/malicious_confidence_60% (W) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Trojan.Gen.MBT / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | HPPyEu.exe, HPPyEu | 10/15/20 18:48 | 10/15/20 18:48 | Win32 EXE | 0bbb414decac416a5299b39372c9ae7d | 27e00b0e8257be5bb24da74818c0403758397f23 | 2026c66a7e07bc89c742dafb2d8ba55cd3dd3885c3926e611ada6f720f2e161a | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | RDN/Generic.dx | win/malicious_confidence_60% (W) | - | a variant of MSIL/Agent.SPI | Trojan.Gen.MBT | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
50 | APT_Loader_MSIL_PGF_2 | 49 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / McAfee: Trojan-FQND!C62DC2BC7E8C / CrowdStrike: win/malicious_confidence_60% (W) / TrendMicro: TROJ_GEN.R03BC0DK420 / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Downloader / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | ndEUig.exe, ndEUig | 11/5/20 1:44 | 11/6/20 6:04 | Win32 EXE | c62dc2bc7e8cd266328e31f1709d3fb2 | 79f9c2978800e79bfddc6612bb1f1ae97d5d8165 | a0e7c6527f6133b7bbf658007b724b4b6243dd579412485ca8a112ff1409e2cc | f34d5f2d4577ed6d9ceec516c1f5a744 | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | Trojan-FQND!C62DC2BC7E8C | win/malicious_confidence_60% (W) | TROJ_GEN.R03BC0DK420 | a variant of MSIL/Agent.SPI | Downloader | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
51 | APT_Loader_MSIL_PGF_2 | 48 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / McAfee: Trojan-FQND!5876D32A0B19 / CrowdStrike: win/malicious_confidence_80% (D) / TrendMicro: TROJ_GEN.R03BC0DKH20 / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Trojan.Gen.MBT / Sophos: Mal/Generic-S / GData: Gen:Variant.Bulz.201155 | ZZNgqq.exe, 5876d32a0b19428bd8355fac58eaab25.virus | 11/22/20 18:13 | 12/1/20 9:40 | Win32 EXE | 5876d32a0b19428bd8355fac58eaab25 | 81d20feb55543d454f2e9335f9923d4007a92148 | f1c5d1482f438bfc4c98729c7987a0d2b74bd56f1202da1be93c4d6c6fee4a07 | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | Trojan-FQND!5876D32A0B19 | win/malicious_confidence_80% (D) | TROJ_GEN.R03BC0DKH20 | a variant of MSIL/Agent.SPI | Trojan.Gen.MBT | - | Mal/Generic-S | Gen:Variant.Bulz.201155 |
52 | APT_Loader_MSIL_PGF_2 | 46 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / McAfee: RDN/Generic.dx / CrowdStrike: win/malicious_confidence_60% (W) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Trojan.Gen.MBT / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | VRqMiv.exe, VRqMiv | 10/15/20 19:36 | 10/15/20 19:36 | Win32 EXE | 525da8247758d996e38fdcbbf2843308 | 4fe25e7ba044194f28be5af424a33de49bd51c1a | 9cffc971287656178eb727addcf9141386dfe3a3dd41f52dca29ed4ebf580763 | f34d5f2d4577ed6d9ceec516c1f5a744 | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | RDN/Generic.dx | win/malicious_confidence_60% (W) | - | a variant of MSIL/Agent.SPI | Trojan.Gen.MBT | - | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
53 | APT_Loader_MSIL_PGF_2 | 45 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / McAfee: Trojan-FQND!A586E48AF444 / CrowdStrike: win/malicious_confidence_100% (W) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Trojan.Gen.MBT / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | aZsJDv.exe, aZsJDv, a586e48af444bfcea181d10eb1f16c10.virobj | 10/14/20 22:18 | 10/21/20 10:15 | Win32 EXE | a586e48af444bfcea181d10eb1f16c10 | 847bf5eaab1fc1d7b6546aab9d06ec5da98e959b | ebc3ab97b983b151c50698c7ea700a2c83c887c08eb443d72e3ad2253de61a83 | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | Trojan-FQND!A586E48AF444 | win/malicious_confidence_100% (W) | - | a variant of MSIL/Agent.SPI | Trojan.Gen.MBT | - | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
54 | APT_Loader_MSIL_PGF_2 | 44 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / McAfee: Artemis!ABE7B46F5F70 / TrendMicro: TROJ_GEN.R002C0DKO20 / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Trojan.Gen.MBT / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Generic-R + Mal/Swrort-AE / GData: Gen:Variant.Ursu.540902 | HKELrw.exe, HKELrw | 11/24/20 18:07 | 11/24/20 18:07 | Win32 EXE | abe7b46f5f70c3ca4a37dff6187d446e | eff9c20ad6ad004a4a3a0b0b4645d67aa898060f | 9ac96b44ae1090e99d0d9059a91fa034a744464cf3cd4fcf157db6e417f45941 | f34d5f2d4577ed6d9ceec516c1f5a744 | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | Artemis!ABE7B46F5F70 | - | TROJ_GEN.R002C0DKO20 | a variant of MSIL/Agent.SPI | Trojan.Gen.MBT | Heuristic.HEUR/AGEN.1137595 | Mal/Generic-R + Mal/Swrort-AE | Gen:Variant.Ursu.540902 |
55 | APT_Loader_MSIL_PGF_2 | 43 | Microsoft: Trojan:Win32/Wacatac.C!ml / Kaspersky: HEUR:Trojan.Win32.Agent.gen / McAfee: Artemis!3F22546168B2 / CrowdStrike: win/malicious_confidence_60% (W) / TrendMicro: TROJ_GEN.R011C0WJJ20 / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Trojan.Gen.MBT / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Generic-S / GData: Gen:Variant.Razy.717378 | shellcode.exe | 10/17/17 10:10 | 10/17/17 10:10 | Win32 EXE | 3f22546168b28570e5060d560ea3bda8 | 6299a75904e83ab3a979852d00a7e504a0cdce3a | 1e7d428cc37a474e6b61c379496e3d647181eadcfd636facc28468eb938ab58f | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Wacatac.C!ml | HEUR:Trojan.Win32.Agent.gen | Artemis!3F22546168B2 | win/malicious_confidence_60% (W) | TROJ_GEN.R011C0WJJ20 | a variant of MSIL/Agent.SPI | Trojan.Gen.MBT | Heuristic.HEUR/AGEN.1137595 | Mal/Generic-S | Gen:Variant.Razy.717378 |
56 | APT_Loader_MSIL_PGF_2 | 43 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / McAfee: RDN/Generic.grp / CrowdStrike: win/malicious_confidence_60% (W) / TrendMicro: TROJ_GEN.R002C0DIT20 / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Trojan.Gen.MBT / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Generic-S / GData: Gen:Variant.Ursu.540902 | qXBFcr.exe, cb752b27030f60b3993394f2ca899012.virus | 9/29/20 17:17 | 9/29/20 17:17 | Win32 EXE | cb752b27030f60b3993394f2ca899012 | 345da4a23cf56c22d218301ec461bfc3ca8e2cc2 | dfbe26ee283b776430f095752173ade4a18fabcfa890ac938c6554ff21fbdf8d | f34d5f2d4577ed6d9ceec516c1f5a744 | TRUE | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | RDN/Generic.grp | win/malicious_confidence_60% (W) | TROJ_GEN.R002C0DIT20 | a variant of MSIL/Agent.SPI | Trojan.Gen.MBT | Heuristic.HEUR/AGEN.1137595 | Mal/Generic-S | Gen:Variant.Ursu.540902 |
57 | APT_Loader_MSIL_PGF_2 | 42 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / McAfee: Trojan-FQND!BBACA7CB1BA8 / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | jzmuoh.exe, jzmuoh | 11/21/20 18:24 | 11/21/20 18:24 | Win32 EXE | bbaca7cb1ba8f613cd50c86695e8dd7c | 2e4a7ab8282b211caf99f2e76edf2fad6b2e7cd4 | f48c5718cb3f83fdbbc05c6a2a4a7187b3b7388a4635ea18d3d54420c7f0ffe2 | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | Trojan-FQND!BBACA7CB1BA8 | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
58 | APT_Loader_MSIL_PGF_2 | 40 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | gipEpp.exe, gipEpp | 11/18/20 17:38 | 11/18/20 17:38 | Win32 EXE | 9cacdb4b14a94bff07ce9cde90f6680a | 80b8356a975f8dcede8ec7179a8633aa80b4b9bc | 3b40eaacabb7a597365f79004b55132b1e74de6177a979acd46eeaeeb7d67a65 | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
59 | APT_Loader_MSIL_PGF_2 | 40 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | AEiddl.exe, AEiddl | 11/17/20 18:14 | 11/17/20 18:14 | Win32 EXE | c21667b26a69d1c59e34b7c72b213afc | 3fe507cb8a4200b8fe5389151ed67cc60645ac33 | a39e235ca4caf08984fdeead2573e7cf087e47c9b826e085ac64e514ad89e0cb | f34d5f2d4577ed6d9ceec516c1f5a744 | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
60 | APT_Loader_MSIL_PGF_2 | 40 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | YwAMWa.exe, YwAMWa | 11/9/20 18:41 | 11/9/20 18:41 | Win32 EXE | b87fef7911c6abce6d90effea6a12947 | 95a1c490d6f684616f4c32fb89179105de1f416a | dcfa9a0ba41b33bf757213019fa5268ef0cd16aa4bb140efb5373eed928e8486 | f34d5f2d4577ed6d9ceec516c1f5a744 | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
61 | APT_Loader_MSIL_PGF_2 | 40 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | yFPYpg.exe, yFPYpg | 11/22/20 17:57 | 11/22/20 17:57 | Win32 EXE | 2d9907b293a408c5264b3a49a28c0ffa | 544745b58550d75880d8094d1f92f7b23ce21191 | 79ad0e121336dfc87d1289cf9baa1b421d91834e746abd022f505f6ddc0ba41e | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
62 | APT_Loader_MSIL_PGF_2 | 40 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | dKtSUb.exe, dKtSUb | 11/22/20 18:20 | 11/22/20 18:20 | Win32 EXE | 00944e3901e8df234bdef456888389fe | 3bb89543370088ded31d472dbc43fe461f865382 | dc9cb38c76168ececd67df7d3e25f087b2155ccc5bd83a693f02e992ab733ba9 | f34d5f2d4577ed6d9ceec516c1f5a744 | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
63 | APT_Loader_MSIL_PGF_2 | 40 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | QxsBrV.exe, QxsBrV | 11/19/20 18:00 | 11/19/20 18:00 | Win32 EXE | 3144529baf360edbc6fa15a2310aad5b | 38660989d03d6e94c556a17b59e58ce4d6f4f7da | 86303a9f520d0cdee876f3e9c982a2e7c72b79deb274984076f83d411fd599f8 | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
64 | APT_Loader_MSIL_PGF_2 | 40 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | cJOjgx.exe, cJOjgx | 11/20/20 17:38 | 11/20/20 17:38 | Win32 EXE | a538467c6711f84a3d80cbb2c94f2967 | 525f40f1c5cc1280922be1441d0d2fd80036e545 | 32995163f766b14f6f5a35725d869c1cbe18acb065b05a253e002e6ba0ad0100 | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
65 | APT_Loader_MSIL_PGF_2 | 40 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | gEJpAD.exe, gEJpAD | 11/20/20 17:37 | 11/20/20 17:37 | Win32 EXE | 91aeba7d239fb32ad596f86dfd0c283e | ccead7169dd9a67877d58902520fb8024c4b784c | 30cba2554985a8943e2f1c6e76f4a1a32160d8adba845c2c22f209059fd5f4ba | f34d5f2d4577ed6d9ceec516c1f5a744 | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
66 | APT_Loader_MSIL_PGF_2 | 40 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | zPdOAK.exe, zPdOAK | 11/21/20 17:30 | 11/21/20 17:30 | Win32 EXE | d6010686c2646a6c6ff24adc47442004 | 62cb91339ce6375dd7400822735982e2d72bad81 | 11b12532ef9ec210c8f4714e402eb193f9e7f5ae2779ce42e190d7d522937624 | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
67 | APT_Loader_MSIL_PGF_2 | 40 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | kpewpu.exe, kpewpu | 11/8/20 18:14 | 11/8/20 18:14 | Win32 EXE | dcbd2764723279013cbdcacaa51fe1f3 | 135edc23cec48446857f0ac35f009b48593618d2 | 6f0ae8e4227f17170d16a83af723479b3c126ab06d846fdaaa7f721554207a9d | f34d5f2d4577ed6d9ceec516c1f5a744 | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
68 | APT_Loader_MSIL_PGF_2 | 40 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | wsqmue.exe, wsqmue | 10/30/20 18:11 | 10/30/20 18:11 | Win32 EXE | 40869ff348bdecf701d6aabcc5e16e67 | 34501b2fa4a55054408d36da195684a8cdc87f4d | 8044d42b3c5d7ea34b0e2e686e3491c6b148c69d30b3cf3ccff9d564ce2f9d11 | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
69 | APT_Loader_MSIL_PGF_2 | 40 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / McAfee: Trojan-FQND!5697E3F79EAB / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Trojan.Gen.MBT / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | OwkJCd.exe, OwkJCd | 12/4/20 20:51 | 12/4/20 20:51 | Win32 EXE | 5697e3f79eab29e35fcac9df7b5d4969 | e1a2cbb6849432afcabe025c8322387199bc17c2 | fa137111289b942f04e1abb99942e16474e10c13e188f1f8c2d94429d579e893 | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | Trojan-FQND!5697E3F79EAB | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Trojan.Gen.MBT | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
70 | APT_Loader_MSIL_PGF_2 | 40 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | jMGOBa.exe, jMGOBa | 11/22/20 17:42 | 11/22/20 17:42 | Win32 EXE | 33e028e4ad035ff7710db1eccdddeaf4 | daf076c64073b5b22fe26157580dd627a1d45ca8 | 3bbdf2a3e66a1a134d859f8cdd0d8526c1fca5209a0c7465644bfa512d183394 | f34d5f2d4577ed6d9ceec516c1f5a744 | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
71 | APT_Loader_MSIL_PGF_2 | 40 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_80% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | Jstaqs.exe, Jstaqs | 11/22/20 17:31 | 11/22/20 17:31 | Win32 EXE | 6b95f18d979aed1242f34f2a6a081c53 | c03e5eca46d1233d1e549f79f17cbaea062f8e3d | 057ac79a16b815007f05b85069eb5561a2aa218b39474936cb0f50103f73d24c | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_80% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
72 | APT_Loader_MSIL_PGF_2 | 40 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | KVNbEA.exe, KVNbEA | 11/22/20 17:44 | 11/22/20 17:44 | Win32 EXE | 2744f6cd65f3224acc15da1f376c2c89 | fd03d4514767555d36d8e7a5b89288ff8ff0a790 | 4487eb760a9ce7cbad2abe13a002d458f0d35855f4cb89db0384102a776346d0 | f34d5f2d4577ed6d9ceec516c1f5a744 | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
73 | APT_Loader_MSIL_PGF_2 | 40 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | MuEbjP.exe, MuEbjP | 11/18/20 17:50 | 11/18/20 17:50 | Win32 EXE | 136d2814dece8c76e18395418da8efb9 | 58cdc7d8e6175ef48d85a1b0602ed4024bf75019 | 6fa556ad9dd894c52c56f589c73260272ff8155048d6b9051ac88c5a722d5558 | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
74 | APT_Loader_MSIL_PGF_2 | 40 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | FNlzQZ.exe, FNlzQZ | 11/8/20 18:36 | 11/8/20 18:36 | Win32 EXE | dcc6dbc8b054d6fcfe2d10224d6adc84 | 5c258ddbe1fc8a5cf11a3c0ccd9f95caf050856b | a8279a95cb10b72bfe24d1b7dfe5e9628fd2ed7c07e7da5559255cebbc56043c | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
75 | APT_Loader_MSIL_PGF_2 | 39 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | BxzkxR.exe, BxzkxR | 11/12/20 17:13 | 11/12/20 17:13 | Win32 EXE | 319b252af562e858d707818c142113c0 | f3265569cebd3be789cd0444464d3c1f8358195e | e33d7e035bd22211f7d12cbae5223855fb5fd5ab209857d1001b29b70a1b201f | f34d5f2d4577ed6d9ceec516c1f5a744 | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
76 | APT_Loader_MSIL_PGF_2 | 39 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | AghDdN.exe, AghDdN | 11/12/20 16:47 | 11/12/20 16:47 | Win32 EXE | 37821cc1570359bffe8a39c232313be7 | 4ba8ede87676121c4257ee83dda3e9f39324b525 | 6b1197af09fa66ea1098e4176c807409b77c4761af8bf75a4cdd60ff351e1087 | f34d5f2d4577ed6d9ceec516c1f5a744 | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
77 | APT_Loader_MSIL_PGF_2 | 39 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_70% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | JHLqUZ.exe, JHLqUZ | 11/18/20 17:28 | 11/18/20 17:28 | Win32 EXE | c250f2242e4e8b0ebc88dd22096be1a0 | 4a5ebbccc5db4c9e865f40c55e74f68cc0e7dceb | 142930cfedc4538e48b9611ca4c30fddc48e70fe342468cf6504925d726050d3 | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_70% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
78 | APT_Loader_MSIL_PGF_2 | 39 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | uPHmmY.exe, uPHmmY | 11/23/20 16:58 | 11/23/20 16:58 | Win32 EXE | ce539f4036d74a9390c66eb100450223 | 04374be1f0e87933682b3c67a9615b1915241323 | 7c4a8573e1fbd45923ade660c77c6281b030812d101a9b6343e37fe12e878d5f | f34d5f2d4577ed6d9ceec516c1f5a744 | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
79 | APT_Loader_MSIL_PGF_2 | 39 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | xgxmBv.exe, xgxmBv | 11/18/20 17:43 | 11/18/20 17:43 | Win32 EXE | 29889d4e0257fcb9b2115fbaf60a288d | 88c6019d78ebce98d335eefb70db3b9eb95dc440 | 513f4fa13633667163345eade85cc71bfe13406d6981b1b7ed4acc547960c164 | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
80 | APT_Loader_MSIL_PGF_2 | 39 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | osdTwB.exe, osdTwB | 11/18/20 17:56 | 11/18/20 17:56 | Win32 EXE | 457af86f65e9a9cf90c8191970bc5024 | c5257c6aca1b55aaf12cd8f5908a7245c5bc9c19 | 88a8b861fa8599ec25e89547f61c461dd9cc9d626363313643d22db355fd324c | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
81 | APT_Loader_MSIL_PGF_2 | 39 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | onHHcf.exe, onHHcf | 11/12/20 16:54 | 11/12/20 16:54 | Win32 EXE | b997b8b40e229a14d59bb50f95650558 | 7792ecee880feb6d013681206be6375f968d7de3 | 8d80e0d69a4e14d0e8ddba42a8bf641f81a2653f1f06f02096d2bb980d3592fa | f34d5f2d4577ed6d9ceec516c1f5a744 | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
82 | APT_Loader_MSIL_PGF_2 | 39 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | qDwurG.exe, qDwurG | 11/23/20 16:53 | 11/23/20 16:53 | Win32 EXE | fb032f3ea41e352e4023d1a0b773c693 | 6d44aa3772738143f26493caa6996dbdd1dcc048 | 69380135e26dcbe1e04b8745998c23869262ea7beed0d6f56eafb4a4d8b1f70e | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
83 | APT_Loader_MSIL_PGF_2 | 39 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | FcCgnO.exe, FcCgnO | 11/18/20 18:21 | 11/18/20 18:21 | Win32 EXE | dd718ab313ca8b2230baf244a07ea316 | 5ce18a98b201376b1606f5366eefe0d5bc35d0b2 | ebeb35a925a36b7770f3f024309a51b301d5e651cd1216c614b81f8a06b3f525 | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
84 | APT_Loader_MSIL_PGF_2 | 39 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | CdVnxR.exe, CdVnxR | 11/20/20 18:01 | 11/20/20 18:01 | Win32 EXE | 988d515ce035787c9b6ab72879b7dd96 | 9fa47f8db89f77f39978297eb3df97c04c7baa78 | 954c4a6c33a286501a2a1a7ad3346dc36d93d454ddf58b0b5dda508f791e4bab | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
85 | APT_Loader_MSIL_PGF_2 | 39 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | VVDHCc.exe, VVDHCc | 11/22/20 18:09 | 11/22/20 18:09 | Win32 EXE | e66f9d44e3eead16613ca5cf2f299f4d | fbcac250966e893bf9d0329f80c20877f072bf53 | b0a6863a5870761800d581ba37059d11adf1fe4b467b82b2cc04ce206c034167 | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | - | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
86 | APT_Loader_MSIL_PGF_2 | 39 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | EKSsmo.exe, EKSsmo | 11/11/20 16:46 | 11/11/20 16:46 | Win32 EXE | 46b5946483b8429456529dd66a3e2cf8 | 99d5eeec3c01cfef44f634d7993fd7ca63cd3849 | 64467a12b53734045753ca72694673fe073fb7d50106655ee61f7820d6c1f1e2 | f34d5f2d4577ed6d9ceec516c1f5a744 | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
87 | APT_Loader_MSIL_PGF_2 | 39 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | fowoBt.exe, fowoBt | 11/11/20 16:39 | 11/11/20 16:39 | Win32 EXE | d2be8c7ab64648efd20ea60defc8348f | 4b05094164dfc6d7d2036814b00751430818315c | 3d1b5a772e5e153843ef93cd524f004fd93462ac1bc142ccddd8b8dbea360bb7 | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
88 | APT_Loader_MSIL_PGF_2 | 39 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Downloader / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | BvfQPu.exe, BvfQPu | 11/9/20 18:43 | 11/9/20 18:43 | Win32 EXE | 5f12d2c543273f1cdd0d16f035c0d56e | c5374a2eb0f9d54b7bc64d5af7abf4259358dd06 | e2bbcbcc0081b45335204835e7d2d72c3edfc4b83a5545da988b0f30488266d7 | f34d5f2d4577ed6d9ceec516c1f5a744 | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Downloader | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
89 | APT_Loader_MSIL_PGF_2 | 39 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | JHodbk.exe, JHodbk | 11/23/20 17:24 | 11/23/20 17:24 | Win32 EXE | 8ddd8e6745f29c0258a3b83fee6ba6cd | 00952405fd755ce64cdda10d5db2811f2f44aa10 | e503d78bb5effc1a05afc27a846d42e23053bbb38a41f76b47ddcaf53345a80d | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
90 | APT_Loader_MSIL_PGF_2 | 39 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | LPVIkY.exe, LPVIkY | 11/23/20 17:14 | 11/23/20 17:14 | Win32 EXE | 8cb9bb259a36488d482f9dd40ee27840 | 2430615c26ba1ae68b9c987bdbc0766881167657 | c01adf8556a2edd24e2486b62c70f2d2859856d4b48f3828bd317f922799eea5 | f34d5f2d4577ed6d9ceec516c1f5a744 | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
91 | APT_Loader_MSIL_PGF_2 | 39 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | hzUGMg.exe, hzUGMg | 11/22/20 18:25 | 11/22/20 18:25 | Win32 EXE | 8711071f5327cb7dc43525e35d541560 | dc3f4091650f2c51a83ea6ca0a87d93c8c256982 | f384b2bfa91b3f787a5e0be823d545529acb943d9a067465281cc8b6fcb99b09 | f34d5f2d4577ed6d9ceec516c1f5a744 | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
92 | APT_Loader_MSIL_PGF_2 | 39 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | kUMgsw.exe, kUMgsw | 11/18/20 17:54 | 11/18/20 17:54 | Win32 EXE | 063a21668fac6562e947322855b1c8f8 | a0fabffe069e673bbcf075888a8c9d3e7ccab254 | 7f45e1d200487f5a106437e94d81fb55cc22cb57b8a8c66644309857f01d67d1 | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
93 | APT_Loader_MSIL_PGF_2 | 39 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | vKSZkp.exe, vKSZkp | 11/12/20 17:00 | 11/12/20 17:00 | Win32 EXE | eb0182a29fa1a6425b25861ed07daf44 | 7b1c89aee900740561eb41e69e02d36319297d75 | a664b9b2eccbe914f7d8d5b4c1f9b856566d0c9c1984c07725bcc6ae507174c1 | f34d5f2d4577ed6d9ceec516c1f5a744 | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
94 | APT_Loader_MSIL_PGF_2 | 39 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | iQkMUp.exe, iQkMUp | 11/23/20 16:48 | 11/23/20 16:48 | Win32 EXE | 699db1a5ccf7d05068046fb8306e758b | 95d86b618b6156b6cf2252122990623ffea28454 | 54da5a95f3223e6acbb1e41900762be698e56bbb278900f50084a468aba9ff3d | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
95 | APT_Loader_MSIL_PGF_2 | 39 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | UMKxyR.exe, UMKxyR | 11/13/20 18:19 | 11/13/20 18:19 | Win32 EXE | d5c200fd68fe6cf05e34b81192b6c114 | d2552dc22eb1bc623df5d008342294c581480f7d | faaa8c868d5f0c87f242f728aa51fb82c8a5531e435f4c9ba326fcf8a61c358b | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
96 | APT_Loader_MSIL_PGF_2 | 39 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | icHjke.exe, icHjke | 11/23/20 17:22 | 11/23/20 17:22 | Win32 EXE | a71cbdad24ebb32acf22ea59051829e6 | 661f2a5513aba59b253738581073f734b65d9922 | e099ce49836e4c70dbd9563e421fba20bead2dc6b9866d1ed88bda9dc718fcfd | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
97 | APT_Loader_MSIL_PGF_2 | 39 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | efvHdW.exe, efvHdW | 11/22/20 18:20 | 11/22/20 18:20 | Win32 EXE | f6a19eedb35645ce68d74627b5639e56 | c1a031b4725cd740df986d29c3e94992813fccc8 | dccfadc48045fcd592c0767d83d86e07206b9313559930e0b461b175a5fa3b87 | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | - | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
98 | APT_Loader_MSIL_PGF_2 | 38 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | iusRbw.exe, iusRbw | 11/23/20 17:08 | 11/23/20 17:08 | Win32 EXE | 2aa34871b1d36c01896968050c662d18 | 8165d5e172c7cc81d6d5afd6d15a5a9601af7834 | a88307e49dc124e0c673ded7e73b74f794d3531019843b1b522661500f02510b | f34d5f2d4577ed6d9ceec516c1f5a744 | TRUE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
99 | APT_Loader_MSIL_PGF_2 | 38 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | UgVFGc.exe, UgVFGc | 11/23/20 16:48 | 11/23/20 16:48 | Win32 EXE | 116d42931d61b88cd8d8da07705fb50d | f0e857a8de8cce580bb4a8238620f20550a594fa | 50daa787edcc0f2e0808bf59bf59e8a4c87b354e18770df49ab28c084ef2123f | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |
100 | APT_Loader_MSIL_PGF_2 | 38 | Microsoft: Trojan:Win32/Meterpreter.N / Kaspersky: HEUR:Trojan.MSIL.Shelma.gen / CrowdStrike: win/malicious_confidence_60% (D) / ESET-NOD32: a variant of MSIL/Agent.SPI / Symantec: Packed.Generic.550 / F-Secure: Heuristic.HEUR/AGEN.1137595 / Sophos: Mal/Swrort-AE / GData: Gen:Variant.Razy.410540 | CRHWFA.exe, CRHWFA | 11/9/20 18:33 | 11/9/20 18:33 | Win32 EXE | 08710f09afdb9824d76b7e74a7ff619a | ea765e7fd3cc78ed24e085cc5d1316a9d4766a89 | c3dd397f53c5646343c5532d3aa3cb51d2241361d345344dbd1ed33380e87660 | f34d5f2d4577ed6d9ceec516c1f5a744 | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | FALSE | Trojan:Win32/Meterpreter.N | HEUR:Trojan.MSIL.Shelma.gen | - | win/malicious_confidence_60% (D) | - | a variant of MSIL/Agent.SPI | Packed.Generic.550 | Heuristic.HEUR/AGEN.1137595 | Mal/Swrort-AE | Gen:Variant.Razy.410540 |