Trojan.Autorun_Trojan.GenericKDZ.94847_265.vir
Trojan with AV evasion and C2
Detects Windows.Generic.ThreatPE high-entropy overlay with loader APIs
SHA-256dd54d4949bddea3a6607e5f97914d7e3cb6bb70d06600a75741b5724da5fce70
Evidence
0x04d5a90000300000004000000ffff0000MZ..............
0x10b8000000000000004000000000000000........@.......
0x2000000000000000000000000000000000................
⋯11 more rows
⋯3 more rows
0x1f000000000000000000000000000000000................
0x200536631dbe877260000b9ff00000099f7Sf1..w&.........
0x210f98d420189c38b5424080fbfc38902e8..B....T$.......
0x2205c260000b9ff00000099f7f98d420189\&...........B..
⋯7 more rows
⋯7 more rows
0x1450e8cb270000595f5e5b89ec5dc3909090..'..Y_^[..]....
0x14605589e583ec145356578d7df7be1eca40U.....SVW.}....@
⋯15 more rows
⋯5 more rows
0xb7bf4c5345545550004c4f434b444f574e00LSETUP.LOCKDOWN.
0xb7cf4b494c4c50524f43455353004b455249KILLPROCESS.KERI
0xb7df4f004b415650455253004b41564c4954O.KAVPERS.KAVLIT
⋯11 more rows
⋯5 more rows
0x14df0000000000000000000000000aaeaa338...............8
0x14e000301e40c754d05394f8b9310b16f2b00....uM.9O....o+.
0x14e10216f7a04db2fd910eee2ea35c7d22036!oz../.....5.. 6
0x14e206f573e08f7a449348430271d1302a511oW>...I4.0'.....
0x14e303f0baf0159840f1100cc131f4e2f4426?...Y.......N/D&
0x14e401ba44924aca08a040b81d8155c256d35..I$........\%m5
0x14e50e50b321ee38a0b1abd5b252394f81529..2......[%#...)
0x14e605f4fb81f09bcbb36556e5c37f8e9561d_O.....6Un\7..V.
0x14e702de8d9379d9840042bcbaf3e07732b19-..7..@.+..>.s+.
0x14e80be0a32325080fd0e8632b515f3839610..22P....2......
0x14e90d2dad002a8ab6611e9b24a1af0e45000......f...J...P.
0x14ea098e2b612a28b7d3334df430e8e66820d......}34.C..f..
0x14eb026c2fa071705d92ea088c5112387ca11&...........#...
0x14ec0fc2f9400ba94270f79c52b39d415c42d./....'.y.+9...-
0x14ed09f07222d95bcc8248f3332170533cf05.."-...$.32..3..
0x14ee0d19cdd0ceabd051856a07e14029e4608........V.~...F.
0x14ef04095c400431d4721c6213f1e29554c01@...C.G!.!?.)UL.
0x14f003bf65b3e4df33b0399964302275b531f;.[>M.;...C.'[S.
0x14f10f697a60faf1f771b4b25df1433908500......w.K%..3...
0x14f208a5fba14909985165ef6f816ddae763f._......^.....v?
0x14f30248fcf3c7fa3862ff159a11bb5bb6e25$..<.../.Y....n%
0x14f409c8aff356d8e6e39382b221925ea6a28...5m.n98+".%.j(
0x14f502ebaf21872b0b91461c9702041d43e0a....r...a.p A.>.
0x14f606b8fee255b580a1cfd91fc1c1256d42ek..%[X.......V..
0x14f703c35573f8db93930888d100e4cd3de3c<5W?..90....L..<
0x14f8048fcef0b73dcdc15feb10c29bf7b9218H...s......).{..
0x14f9014735b325a1ecb30e89c701c1d057f23.s[2Z..0..p....#
0x14fa0cf1b1537ec55cb2136f7b61f814e5823...7.U.!6....NX#
0x14fb0cedd233811a7be3a63c3e137c43d461f..#8...:c..7.=F.
0x14fc0497e441f965fc109dfffdf35ca123339I~D.._.....5..39
0x14fd04531cd02fa77da308c28f826809e4a00E1...w.0.(.&..J.
0x14fe0b9f79e1f3775db18749c3e08a1633d13....7u..t.>..c=.
0x14ff0b2cb8835e2d6cc2842493230048b3e3b...5...(BI20..>;
0x1500006516436532ec017d8c3c0254753f21d.Qd6S......%GS..
0x150102ad1a6229aa1bd00dc2f431ad9e88528*.."...../C....(
0x15020f569820466516a1b3d08c61e9e3d5522.i..fQj.=....=U"
0x1503057f55815d0f23206e0f138326ed1fd3eW.X...2...82n..>
0x150406937ec19ad746521643c3323d65e6f22i7...te!d<3#.^o"
0x1505028cef73f7bcadc0c309ec30154101c2c(..?{...0...T..,
0x15060ef2714106508be3531847d1cb499c214.'..e..51.}.....
0x150700e956835a620151a209b2119a33f9100..h5. .. .!..?..
0x15080837922167696d2163a9bdc052c4b0d14.y".v...:...,K..
0x150908b096603d54abf09856f05067097fb3b..f..J...o..p..;