home

kgcdrx6_rar_downloader.exe

The executable kgcdrx6_rar_downloader.exe has been detected as malware by 1 anti-virus scanner. This is a setup program which is used to install the application. The file has been seen being downloaded from b.websited.link.
MD5:
5e6de6ffa448e2ea2d94f2718b77362a

SHA-1:
73fab8b8c1f8b6aaa0161736061207afda4db33d

SHA-256:
5cba8d538f2fe4ecfad3db79761f39d9141bb38ed564e47062cc04f98d275101

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
1/12/2025 10:32:58 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Threat.Win.Reputation.IMP
15.7.4.20

File size:
358 KB (366,592 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
11/22/2013 9:30:29 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
6144:JH/crnaL5UE0tAGfurHQFSWAdh3QvLEX+6PyMMFddUBEGZ9Ef:10raL5UfKGfujg72QvLkJqMMFfUBEGZa

Entry address:
0x1FEEB

Entry point:
E8, 54, 12, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 90, B8, 43, 00, E8, 5F, 17, 00, 00, E8, 21, 14, 00, 00, 0F, B7, F0, 6A, 02, E8, E7, 11, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, C8, 0B, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Code size:
148 KB (151,552 bytes)

The file kgcdrx6_rar_downloader.exe has been seen being distributed by the following URL.

http://b.websited.link/hp/?q=dP7P2vxi7Xflv xztvg7MooblgL7NNMFgo2A6QjBin9noBMqaTEL9NVMcX37WkHOvQ0iaND/XZrHmKJOONIwsmvOIuKKrHOEIM8TJwgZ iCmQawel2ILlPULq79igv16RaWMEDUQPHG8rt7yaJ6yx0H6jqz00Zo8hEuqsUB5IC8nGdgrP1w2HZyAnFplMrGrxBH4gb5IstmM09BuKIlTu8nR8Du2GBJxH9fXvTmvK1lRQNHIaKsxjxQfGCLpit90ySozG7P OtYuLXa12EC0M tI0NgcBd7nI9RhEpLEzf1ZkFfpjvcUXQ9deTG1ebfYKQzgK9bf3yT6 6KA3t9aMAsR4EqjjHqvIxbwZR9r8BLZm/i9UFnCmSGk6y9HzXLoFDzg3AsfY8tuVthIk8TvKSaBoUBOo5Emo0Au2Oy zrqcnPeOvOPzEDNiEOVhp zRPKyuifomeSQlFE1U8GdICcniMBGQMLQuL0akaTP4BnZg89QbgP79FXsWpg5BFsTzLQnhhpZCtJ gEwnRpReDLBtKSIB bjqPgqlWicCD4wiD2PzZI5lSp4AcRZeuzT3aUTzh/AIkJN808opppvsCyKkf/XvkGAPPj cxn5J3cj2tZ8hK0G50HUieAN7fwuw8zoUMbJNSWwF/zLZD4aJqc6OoEzqV4JMi/.../90oGyBuih8U4mEe9G9pzUFA5hfCCfA2oiumVWgsdj&external_id=1430539649961456391&uuid=5jwcyXfBEGn3ZDskzNdoJyPCChs2O3GXRW9BLIcGRR1VNG4wzONgJhRPjZBmrUWSuTh7xlAW1TYX9lonDza6tbzHqLO3reHX76IPQStHPfTTxeZa6HdTDbebQT6VWJivScbdzRaIjgMJGTnABeDAAL8cibp50rX5PN9MtPmYO4aUiXtbpwv0EgrXP1aHLFZneSUjTpSJpSSMW9kSzdrY9CaQ

Remove kgcdrx6_rar_downloader.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.