home

tev ddoser.exe

Booter

SmartFTP Client

The executable tev ddoser.exe has been detected as malware by 13 anti-virus scanners.
Publisher:
SmartFTP Client  (signed and verified)

Product:
Booter

Version:
0.0.0

MD5:
da3a7b743c0d0217c3d3e0e90d15389b

SHA-1:
25f2584958cdc93e3de2831b15b9b6478a77a91e

SHA-256:
dc45a404031a6d39e5b76496dd01ed75d37b0c615c310014be3a066c14d013fa

Scanner detections:
13 / 68

Status:
Malware

Analysis date:
1/13/2025 4:11:21 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Inject.owpanjt
8.3.2.4

avast!
MSIL:GenMalicious-DZ [Trj]
2014.9-161211

AVG
MSIL4
2017.0.2532

Dr.Web
BackDoor.Comet.1783
9.0.1.0346

ESET NOD32
MSIL/Injector.ESI (variant)
10.12865

Fortinet FortiGate
MSIL/Injector.ESI!tr
12/11/2016

IKARUS anti.virus
Trojan.MSIL4
t3scan.1.9.5.0

Kaspersky
HEUR:Trojan.Win32.Generic
14.0.0.-845

Malwarebytes
Backdoor.Agent.TMPGen
v2016.12.11.09

Microsoft Security Essentials
Trojan:MSIL/Toauta!rfn
1.1.12400.0

NANO AntiVirus
Trojan.Win32.Comet.dfkpgi
1.0.14.5380

Sophos
Troj/MSILInj-HE
4.98

VIPRE Antivirus
Trojan.MSIL.Toauta.b
46488

File size:
148.4 KB (151,920 bytes)

Product version:
0.0.0

Original file name:
maintest.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\tevddoser\tev ddoser.exe

Digital Signature
Signed by:
SmartFTP Client

Authority:
SmartFTP Client

Valid from:
1/2/2014 12:56:32 PM

Valid to:
1/2/2114 12:56:32 PM

Subject:
CN=SmartFTP Client

Issuer:
CN=SmartFTP Client

Serial number:
6C7C1723381A15A44161851A894BF545

File PE Metadata
Compilation timestamp:
1/11/2016 4:05:35 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

Entry address:
0x257FE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.8569

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
142.5 KB (145,920 bytes)

Remove tev ddoser.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.