File: 202fb56edb2fb542e05c845d62ffbdcfbebed9ec

Metadata
File name:c212074b43b6ef811f2a8fb72e670e0c.exe
File type:PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
File size:344064
Analysis date:2018-11-11 14:49:20
MD5:c212074b43b6ef811f2a8fb72e670e0c
SHA1:202fb56edb2fb542e05c845d62ffbdcfbebed9ec
SHA256:4ce7c9e9ca6f785921921de4d0b75c5436cd0d760ac71ddb30b8c5a610ae34dd
SHA512:N/A
SSDEEP:N/A
IMPHASH:N/A
Authentihash:N/A
Related resources
APTNotes
Cyber threat intelligence reports associated with 202fb56edb2fb542e05c845d62ffbdcfbebed9ec.
Loading...
Domains
Domains the malware sample communicates with.
Hosts
Hosts the malware sample communicates with.
HTTP Requests
HTTP requests the malware sample makes.
AV Detections
AV detection names associated with the malware sample.
ALYacTrojan.Korplug.A
APEXMalicious
AVGWin32:Malware-gen
Acronissuspicious
Ad-AwareTrojan.GenericKD.40135028
AhnLab-V3Malware/Win32.Generic.C2409415
AlibabaBackdoor:Win32/Gulpix.f72b5ff6
Antiy-AVLTrojan[Backdoor]/Win32.Gulpix
ArcabitTrojan.Generic.D2646974
AvastWin32:Malware-gen
AviraHEUR/AGEN.1034246
BitDefenderTrojan.GenericKD.40135028
BitDefenderThetaGen:NN.ZedlaF.32253.vu4@airGt2mi
BkavW32.TesokeDQS.Trojan
CAT-QuickHealTrojan.IGENERIC
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
CyrenW32/Trojan.FXRX-2806
DrWebBackDoor.PlugX.23
ESET-NOD32Win32/Korplug.MK
EmsisoftTrojan.GenericKD.40135028 (B)
Endgamemalicious (high confidence)
F-SecureHeuristic.HEUR/AGEN.1034246
FireEyeGeneric.mg.c212074b43b6ef81
FortinetW32/Generic.AC.20D146
GDataTrojan.GenericKD.40135028
IkarusTrojan.Win32.Korplug
Invinceaheuristic
JiangminBackdoor.Gulpix.ix
K7AntiVirusTrojan ( 00527ad91 )
K7GWTrojan ( 00527ad91 )
KasperskyBackdoor.Win32.Gulpix.ccy
MAXmalware (ai score=100)
MaxSecureTrojan.Malware.22193850.susgen
McAfeeGenericRXED-YA!C212074B43B6
McAfee-GW-EditionBehavesLike.Win32.Generic.fc
MicroWorld-eScanTrojan.GenericKD.40135028
MicrosoftTrojan:Win32/CryptInject.AD
NANO-AntivirusTrojan.Win32.Korplug.eyffrb
Paloaltogeneric.ml
PandaGeneric Malware
Qihoo-360HEUR/QVM30.1.4495.Malware.Gen
Rising[email protected] (RDMK:61U1hmZnn4clbIyek9Nveg)
SentinelOneDFI - Suspicious PE
SophosTroj/Korplug-AE
SymantecTrojan.Gen.2
TrendMicroTROJ_GEN.R020C0DEE19
TrendMicro-HouseCallTROJ_GEN.R020C0DEE19
VBA32Trojan.Tiggre
VIPRETrojan.Win32.Generic!BT
YandexTrojan.Korplug!BdToMmrRIxs
ZillyaTrojan.Korplug.Win32.965
ZoneAlarmBackdoor.Win32.Gulpix.ccy
Mutants
Mutants created by the malware sample.
Registry keys
Registry keys created by the malware sample.
Comments
User comments about 202fb56edb2fb542e05c845d62ffbdcfbebed9ec.
NOTICE: We have updated our privacy terms and conditions in accordance to GDPR. By using our site, you acknowledge that you have read and understand our Privacy Policy. Your use of ThreatMiner’s Products and Services is subject to these policies and terms.