home

verifique su demanda.exe.bz2

The file verifique su demanda.exe.bz2 has been detected as malware by 6 anti-virus scanners. The file has been seen being downloaded from bay181.mail.live.com and multiple other hosts.
MD5:
8e7585912af012b5ee9e591e076d16d0

SHA-1:
dc0a6dd13f2d7e8dcace19359755669d51193341

SHA-256:
47deea136360546bcea554b281316ee174d4781384371972afa824969f3d314b

Scanner detections:
6 / 68

Status:
Malware

Analysis date:
11/15/2024 9:56:55 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Dropper.VB.46318
8.3.2.4

avast!
Win32:Malware-gen
2014.9-160114

AVG
Dropper.Generic9
2017.0.2864

ESET NOD32
Win32/Remtasu
10.12862

IKARUS anti.virus
Trojan.Win32.Remtasu
t3scan.1.9.5.0

Kaspersky
Trojan.Win32.Xtrat
14.0.0.817

File size:
108.2 KB (110,813 bytes)

Common path:
C:\users\{user}\downloads\verifique su demanda.exe.bz2

The file verifique su demanda.exe.bz2 has been seen being distributed by the following 5 URLs.

https://bay181.mail.live.com/.../ScanAttachment.aspx?messageid=mgOoBuzme55RGWU9idZ181dA2&attindex=0&cp=-1&attdepth=0&blob=MHxWZXJpZmlxdWUgU3UgRGVtYW5kYS5leGUuYnoyfGFwcGxpY2F0aW9uL3gtYnppcDI_3d&entryPt=download&biciPrevious=119a702e-8151-485a-8652-03f1fada9ac3_00290fd6a7f_5699

https://mail.google.com/mail/u/.../?ui=2&ik=8f4ff89453&view=att&th=152377a605659b4f&attid=0.1&disp=safe&realattid=f_ijbpxrzc0&zw

https://attachment.outlook.office.net/owa/normita0610@hotmail.com/service.svc/.../GetFileAttachment?id=AQMkADAwATY3ZmYAZS1jYWEAMS1mY2MANS0wMAItMDAKAEYAAAMQ04a1kWZiRZ7nThPwbGgbBwDOTAayeOjcQ5g2tIeSBIQYAAACAQwAAADOTAayeOjcQ5g2tIeSBIQYAAAAMLfI9QAAAAESABAAqT8lWtLks0WhpYL0YF9CNw==&X-OWA-CANARY=vOEOTM3OtEW74E93ATK3iJA1TB-NG9MYcqOXoxHErYwN8EtTVtTpHeA8EV_LiPZU4LD3tym0vUM.&token=f08c5aae-84c7-4520-87b9-28b8a71d7e74

https://doc-0s-bk-docs.googleusercontent.com/docs/securesc/nfu2hi3tkri6kp8gp15avtco6shsmc82/4plr5encvumudiqnthmhtoegjn5us338/1452621600000/.../08813153145862350864/0B7qEV-eNEDzwM0FwdDBUOHRmbzNLemhrMWwxVm1uVkVaTTBF?e=download

https://mail.google.com/mail/u/.../?ui=2&ik=5075f70d7a&view=att&th=15237504067b3fd4&attid=0.1&disp=safe&realattid=f_ijboam8n0&zw

Remove verifique su demanda.exe.bz2 - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.