home

הסרט הראשון שחמאס מפרסמת על החייל הישראלי העצור אהרון שאול.mp4.exe

The executable הסרט הראשון שחמאס מפרסמת על החייל הישראלי העצור אהרון שאול.mp4.exe has been detected as malware by 29 anti-virus scanners. The file has been seen being downloaded from www.goo.gl.
Version:
0.0.0.0

MD5:
a9e559ea7d9ba3a6007026591326f3dc

SHA-1:
11b3c08018cb5fce1643725abd0b564fd775333c

Scanner detections:
29 / 68

Status:
Malware

Analysis date:
11/2/2024 3:38:43 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Barys.743
229

Agnitum Outpost
Trojan.Agent
7.1.1

AhnLab V3 Security
Trojan/Win32.Fakeavlock
2015.08.10

Avira AntiVirus
TR/Dropper.MSIL.Gen
8.3.1.6

Arcabit
Trojan.Barys.743
1.0.0.425

avast!
MSIL:GenMalicious-KX [Trj]
2014.9-160620

AVG
MSIL7
2017.0.2707

Baidu Antivirus
Trojan.MSIL.Injector
4.0.3.16620

Bitdefender
Gen:Variant.Barys.743
1.0.20.860

Comodo Security
UnclassifiedMalware
22973

Dr.Web
Trojan.DownLoader12.54576
9.0.1.0172

Emsisoft Anti-Malware
Gen:Variant.Barys.743
8.16.06.20.01

ESET NOD32
MSIL/Injector.CJJ (variant)
10.12069

Fortinet FortiGate
W32/Inject.YME!tr
6/20/2016

F-Secure
Gen:Variant.Barys.743
11.2016-20-06_2

G Data
Gen:Variant.Barys.743
16.6.25

IKARUS anti.virus
Trojan.SuspectCRC
t3scan.1.9.5.0

K7 AntiVirus
Trojan
13.207.16835

Kaspersky
HEUR:Trojan.Win32.Generic
14.0.0.30

McAfee
RDN/Generic BackDoor!bcp
5600.6363

Microsoft Security Essentials
Backdoor:MSIL/Bladabindi
1.1.11903.0

MicroWorld eScan
Gen:Variant.Barys.743
17.0.0.516

NANO AntiVirus
Trojan.Win32.Inject.dqchvx
0.30.24.3079

Panda Antivirus
Trj/CI.A
16.06.20.01

Qihoo 360 Security
Win32/Trojan.791
1.0.0.1015

Quick Heal
Trojan.Generic.r3
6.16.14.00

Sophos
Mal/Generic-S
4.98

Trend Micro
TROJ_GEN.R021C0DD815
10.465.20

VIPRE Antivirus
Trojan.Win32.Generic.pak!cobra
42758

File size:
523 KB (535,552 bytes)

Product version:
0.0.0.0

Original file name:
zozo.exe

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
4/2/2015 5:06:24 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:f0t5RhVj9LpQu9MbGFdGfkkQnWdEdXa5yIAhag3556MPPxbZ:Unj9NQGFdGfoXXa5yRaC56MPPxbZ

Entry address:
0x6BC8C

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.9989

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
423.5 KB (433,664 bytes)

The file הסרט הראשון שחמאס מפרסמת על החייל הישראלי העצור אהרון שאול.mp4.exe has been seen being distributed by the following URL.

http://www.goo.gl/rno7S7

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.