5xc6x.exe

The executable 5xc6x.exe has been detected as malware by 16 anti-virus scanners.
MD5:
e15dc5c01a6869ff6eddc42c648590e0

SHA-1:
b0145880b15913df31ab65c48b7ed6389e638d66

SHA-256:
12868c4c2a6bd539e9cb34620c9fd34b3badb0116fe516982eafce8c1f0c4f43

Scanner detections:
16 / 68

Status:
Malware

Analysis date:
4/25/2024 7:02:53 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Mikey.25545
488

Avira AntiVirus
TR/Crypt.Xpack.289361
8.3.2.2

Arcabit
Trojan.Mikey.D63C9
1.0.0.568

AVG
Crypt5
2016.0.2966

Bitdefender
Gen:Variant.Mikey.25545
1.0.20.1385

Dr.Web
Trojan.Inject2.5487
9.0.1.0277

Emsisoft Anti-Malware
Gen:Variant.Mikey.25545
8.15.10.04.10

ESET NOD32
Win32/Kryptik.DZGD (variant)
9.12355

Fortinet FortiGate
PossibleThreat.P0
10/4/2015

F-Secure
Gen:Variant.Graftor.247820
5.14.151

G Data
Gen:Variant.Mikey.25545
15.10.25

Kaspersky
Backdoor.Win32.Androm
14.0.0.1325

Malwarebytes
Trojan.Rovnix
v2015.10.04.10

MicroWorld eScan
Gen:Variant.Mikey.25545
16.0.0.831

Qihoo 360 Security
HEUR/QVM10.1.Malware.Gen
1.0.0.1015

Sophos
Mal/Generic-S
4.98

File size:
220 KB (225,280 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\5xc6x.exe

File PE Metadata
Compilation timestamp:
10/3/2015 5:27:58 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3072:TkkM7DE6iH+/MvGS3XO3eFMRqAg0FuSb+oj77Koy7fz6dhJk:AkKDiHx+SHOkMRqAOSDj7Py7udhJk

Entry address:
0x9542

Entry point:
E8, 1C, C1, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 56, 57, 33, F6, BF, 38, C9, 44, 00, 83, 3C, F5, 5C, F3, 42, 00, 01, 75, 1E, 8D, 04, F5, 58, F3, 42, 00, 89, 38, 68, A0, 0F, 00, 00, FF, 30, 83, C7, 18, E8, 8F, C1, 00, 00, 59, 59, 85, C0, 74, 0C, 46, 83, FE, 24, 7C, D2, 33, C0, 40, 5F, 5E, C3, 83, 24, F5, 58, F3, 42, 00, 00, 33, C0, EB, F1, 8B, FF, 53, 8B, 1D, B4, F1, 41, 00, 56, BE, 58, F3, 42, 00, 57, 8B, 3E, 85, FF, 74, 13, 83, 7E, 04, 01, 74, 0D, 57, FF, D3, 57, E8, 15, 2B, 00, 00, 83, 26, 00, 59, 83, C6...
 
[+]

Entropy:
6.3933

Code size:
117.5 KB (120,320 bytes)

Remove 5xc6x.exe - Powered by Reason Core Security