home

be61.tmp

The file be61.tmp has been detected as malware by 30 anti-virus scanners.
MD5:
020c8ff328a43a9e5952892970e8d004

SHA-1:
2271cf49fe20716eed25fed0e8fdb62877280557

SHA-256:
3e8d9578dfafa690bae7ff881176fc14be96372ffab0239c594cd48456dcf617

Scanner detections:
30 / 68

Status:
Malware

Analysis date:
5/1/2024 8:51:29 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.GenericKD.2482913
577

Agnitum Outpost
Backdoor.Papras
7.1.1

Avira AntiVirus
TR/Crypt.ZPACK.15226
8.3.1.6

Arcabit
Trojan.Generic.D25E2E1
1.0.0.425

avast!
Win32:Malware-gen
2014.9-150707

AVG
PSW.Generic12
2016.0.3055

Baidu Antivirus
Backdoor.Win32.Papras
4.0.3.1577

Bitdefender
Trojan.GenericKD.2482913
1.0.20.940

Bkav FE
HW32.Packed
1.3.0.6379

Emsisoft Anti-Malware
Trojan.GenericKD.2482913
8.15.07.07.03

ESET NOD32
Win32/Kryptik.DLTS (variant)
9.11816

Fortinet FortiGate
W32/Kryptik.DLTS!tr
7/7/2015

F-Secure
Trojan.GenericKD.2482913
11.2015-07-07_3

G Data
Trojan.GenericKD.2482913
15.7.25

IKARUS anti.virus
Trojan.Win32.Crypt
t3scan.1.9.5.0

K7 AntiVirus
Password-Stealer
13.205.16308

Kaspersky
Backdoor.Win32.Papras
14.0.0.1772

Malwarebytes
Trojan.Bedep
v2015.07.07.03

McAfee
RDN/Generic BackDoor!bdj
5600.6711

Microsoft Security Essentials
Backdoor:Win32/Vawtrak.F
1.1.11701.0

MicroWorld eScan
Trojan.GenericKD.2482913
16.0.0.564

NANO AntiVirus
Trojan.Win32.ZPACK.dstsfm
0.30.24.2086

nProtect
Trojan.GenericKD.2482913
15.06.19.01

Panda Antivirus
Trj/Genetic.gen
15.07.07.03

Qihoo 360 Security
HEUR/QVM40.1.Malware.Gen
1.0.0.1015

Rising Antivirus
PE:Trojan.Win32.Generic.18C4C2A7!415548071
23.00.65.15705

Sophos
Mal/Generic-S
4.98

Trend Micro House Call
TROJ_GEN.R021C0CFI15
7.2.188

Trend Micro
TROJ_GEN.R021C0CFI15
10.465.07

VIPRE Antivirus
Trojan.Win32.Generic
41296

File size:
392.8 KB (402,266 bytes)

Common path:
C:\users\{user}\appdata\local\temp\be61.tmp

File PE Metadata
Compilation timestamp:
4/7/2005 5:59:40 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:W76oyeRR+P3iwwR+SKB3xwOSvkkYjYfqdWXd9C90cTetHbhyLt:W76ORRI3XSKBvSHYjPcNQRc7he

Entry address:
0x2FEC

Entry point:
68, 20, 1E, 06, 10, 6A, 15, FF, 15, 84, 10, 00, 10, C7, 05, 64, 0D, 01, 10, 3A, 00, 00, 00, 83, 3D, 64, 0D, 01, 10, 00, 7E, 70, 6A, 01, 68, A2, 2B, 00, 10, 68, 88, 2B, 00, 10, FF, 15, 80, 10, 00, 10, 85, C0, 74, 49, C7, 05, C4, 1D, 06, 10, 58, 00, 00, 00, C7, 05, 14, 1E, 06, 10, 34, 00, 00, 00, C7, 05, E0, 1D, 06, 10, 34, 00, 00, 00, 68, 14, 1E, 06, 10, 68, E0, 1D, 06, 10, 68, 7E, 2B, 00, 10, FF, 15, 78, 10, 00, 10, A1, C4, 1D, 06, 10, 83, E8, 01, A3, C4, 1D, 06, 10, 83, 3D, C4, 1D, 06, 10, 00, 7F, C1, 8B...
 
[+]

Entropy:
7.4506

Code size:
49 KB (50,176 bytes)

Remove be61.tmp - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.