home

youtube view bot v2.0 alam3arb.exe

MD5:
9a368a65b7e6c287586f6d00b913386f

SHA-1:
40ebac599d491f77089460264eb9cb021aa9737a

SHA-256:
cccc4d9b78634dc798a9e7bdb886a87002a232b60ffdd688ca67efd4536993fc

Scanner detections:
4 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/23/2024 2:42:30 PM UTC  (today)

Scan engine
Detection
Engine version

F-Prot
W32/Backdoor2.HWJV
v6.4.7.1.166

K7 AntiVirus
Trojan
13.202.15641

McAfee
Artemis!9A368A65B7E6
5600.6694

Total Defense
Win32/Tnega.AWMI
37.0.11558

File size:
410 KB (419,840 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\youtube view bot v2.0 alam3arb.exe

File PE Metadata
Compilation timestamp:
7/30/2014 6:15:11 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.50

CTPH (ssdeep):
1536:LLdD+0MON593j/14R9/qp9CIlbMUkWrTLfeY85tcAmYyULpEOP:LLdSro1B4v/U5qivLUEU

Entry address:
0x1000

Entry point:
68, D8, 00, 00, 00, 68, 00, 00, 00, 00, 68, 90, B0, 40, 00, E8, 7C, 21, 00, 00, 83, C4, 0C, 68, 00, 00, 00, 00, E8, 75, 21, 00, 00, A3, 94, B0, 40, 00, 68, 00, 00, 00, 00, 68, 00, 10, 00, 00, 68, 00, 00, 00, 00, E8, 62, 21, 00, 00, A3, 90, B0, 40, 00, E8, BC, 1F, 00, 00, E8, 27, 6C, 00, 00, E8, B9, 5F, 00, 00, E8, ED, 57, 00, 00, E8, DB, 41, 00, 00, E8, 03, 38, 00, 00, E8, AE, 34, 00, 00, E8, 09, 2B, 00, 00, E8, 5D, 28, 00, 00, 68, 07, 00, 00, 00, 68, 30, A2, 40, 00, 8D, 05, 64, B1, 40, 00, 50, 68, 08, 00...
 
[+]

Entropy:
4.8873

Packer / compiler:
PKLITE32, 0x1.1

Code size:
29 KB (29,696 bytes)

The file youtube view bot v2.0 alam3arb.exe has been seen being distributed by the following 6 URLs.

http://download735.mediafire.com/keby9qt5khsg/.../YouTube View Bot V2.0 ALam3arb.exe

http://download1098.mediafire.com/692pkdav960g/.../YouTube View Bot V2.0 ALam3arb.exe

http://download735.mediafire.com/usw9sqe03peg/.../YouTube View Bot V2.0 ALam3arb.exe

http://download735.mediafire.com/oncsw9hbt8xg/.../YouTube View Bot V2.0 ALam3arb.exe

http://download1838.mediafire.com/s3opoc7ippeg/.../YouTube View Bot V2.0 ALam3arb.exe

http://download1187.mediafire.com/amf2gawkm8rg/.../YouTube View Bot V2.0 ALam3arb.exe

Scan youtube view bot v2.0 alam3arb.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.