Analysis Date2018-04-15 10:07:25
MD5
SHA14b72a6f2928417a1276353ee206d5f6a74e3ca69

Static Details:

AVArcabit (arcavir)Gen:Heur.ARP.1
AVAuthentiumW32/Troj_Obfusc.AO.gen!Eldorado
AVGrisoft (avg)Cryptic.DYR
AVAvira (antivir)TR/Crypt.XPACK.Gen
AVAlwil (avast)MalOb-IJ [Cryp]
AVAd-AwareGen:Heur.ARP.1
AVBitDefenderGen:Heur.ARP.1
AVBullGuardGen:Heur.ARP.1
AVClamAVWin.Trojan.Agent-976851
AVDr. WebTrojan.PWS.Panda.1949
AVEmsisoftGen:Heur.ARP.1
AVMicroWorld (escan)Gen:Heur.ARP.1
AVCA (E-Trust Ino)Gen:Heur.ARP.1
AVFortinetW32/ZeroAccess.B!tr
AVFrisk (f-prot)W32/Troj_Obfusc.AO.gen!Eldorado
AVF-SecureGen:Heur.ARP.1
AVIkarusTrojan.Crypt
AVK7Error Scanning File
AVKasperskyTrojan.Win32.Generic
AVMalwareBytesTrojan.Agent.MRGGen
AVMcafeePWS-Zbot.gen.hv
AVMicrosoft Security EssentialsPWS:Win32/Zbot
AVNANOTrojan.Win32.Panda.dzqeat
AVEset (nod32)Win32/Kryptik.ADVR
AVPadvishNo Virus
AVCAT (quickheal)TrojanPWS.Zbot.Gen
AVRisingNo Virus
AV360 SafeNo Virus
AVSUPERAntiSpywareTrojan.Agent/Gen-MultiCur
AVSymantecPacked.Generic.366
AVTrend MicroTSPY_ZBOT.SM32
AVTwisterTrojan.0000558BEC83EC0C@.mg
AVVirusBlokAda (vba32)Trojan-Ransom.Winlock.5112
AVWindows DefenderPWS:Win32/Zbot
AVZillya!No Virus

Runtime Details:

Network Details:


Raw Pcap

Strings