7eef6ef8fed53b7c3bf61ba821f375a0a433ea4cb0185fd223780b729a9a5792 (SHA256)
output.113528456.txt.exe
Created at 2018-08-10 04:08:00
Notifications (1/1)
The maximum number of reputation file hash requests (20 per analysis) was exceeded. As a result, the reputation status could not be queried for all file hashes. In order to get the reputation status for all file hashes, please increase the 'Max File Hash Requests' setting in the system configurations.
YARA Information
Applied On | Sample Files, PCAP File, Created Files, Modified Files, Process Dumps |
Number of YARA matches | 5 |
Ruleset Name | Rule Name | Rule Description | File Type | Filename | Classification | Severity | Actions |
---|---|---|---|---|---|---|---|
RATs | xrat_quasarrat | xRAT malware | PCAP File | analysis.pcap | Backdoor |
5/5
|
|
RATs | xrat_quasarrat | xRAT malware | Created File | C:\Users\EEBsYm5\AppData\Local\Temp\JrsI6VAkyYDZ.exe | Backdoor |
5/5
|
|
Malware | Vermin_Keylogger_Jan18_1 | Vermin keylogger | Created File | C:\Users\EEBsYm5\AppData\Local\Temp\JrsI6VAkyYDZ.exe | Backdoor, Spyware |
5/5
|
|
RATs | xrat_quasarrat | xRAT malware | Process Dump | \Users\EEBsYm5\AppData\Local\Temp\JrsI6VAkyYDZ.exe | Backdoor |
5/5
|
|
Malware | Vermin_Keylogger_Jan18_1 | Vermin keylogger | Process Dump | \Users\EEBsYm5\AppData\Local\Temp\JrsI6VAkyYDZ.exe | Backdoor, Spyware |
5/5
|
|