home

bet.exe

The executable bet.exe has been detected as malware by 33 anti-virus scanners.
MD5:
2bd25a2628378e958512b3649079252c

SHA-1:
d2473677f5ee999304730ae4146121e13cee1c96

SHA-256:
a5687299c3bb39d980fe3cb213ddc0aa4f953fdb15162373bc04ca664823121c

Scanner detections:
33 / 68

Status:
Malware

Analysis date:
4/25/2024 10:04:52 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.GenericKD.1731775
856

Agnitum Outpost
Trojan.Yakes
7.1.1

AhnLab V3 Security
Dropper/Win32.Necurs
2014.07.04

Avira AntiVirus
TR/Crypt.Xpack.73440
7.11.158.80

avast!
Win32:Downloader-VMA [Trj]
2014.9-141002

AVG
SHeur4
2015.0.3334

Baidu Antivirus
Worm.Win32.Ngrbot
4.0.3.14102

Bitdefender
Trojan.GenericKD.1731775
1.0.20.1375

Bkav FE
W32.RexzuaC.Trojan
1.3.0.4959

Comodo Security
UnclassifiedMalware
18753

Dr.Web
BackDoor.IRC.NgrBot.449
9.0.1.0275

Emsisoft Anti-Malware
Trojan.GenericKD.1731775
8.14.10.02.05

ESET NOD32
Win32/Injector.BGOY (variant)
8.10039

Fortinet FortiGate
W32/Kryptik.SMA!tr
10/2/2014

F-Secure
Trojan.GenericKD.1731775
11.2014-02-10_5

G Data
Trojan.GenericKD.1731775
14.10.24

IKARUS anti.virus
Trojan.Win32.Injector
t3scan.1.6.1.0

K7 AntiVirus
Trojan
13.180.12598

Kaspersky
Trojan.Win32.Yakes
14.0.0.3164

McAfee
RDN/Generic.dx!dd3
5600.6990

Microsoft Security Essentials
Trojan:Win32/Neurevt.AB
1.10701

MicroWorld eScan
Trojan.GenericKD.1731775
15.0.0.825

NANO AntiVirus
Trojan.Win32.Yakes.dbphmd
0.28.0.60577

Norman
Troj_Generic.UTIKI
11.20141002

Panda Antivirus
Trj/CI.A
14.10.02.05

Qihoo 360 Security
Win32/Trojan.e5d
1.0.0.1015

Quick Heal
(Suspicious) - DNAScan
6.14.14.00

Sophos
Mal/Ransom-CR
4.98

Total Defense
Win32/Tnega.QAeefHB
37.0.11036

Trend Micro House Call
TROJ_GEN.R0CBC0DFS14
7.2.275

Trend Micro
TROJ_GEN.R0CBC0DFS14
10.465.02

VIPRE Antivirus
Trojan.Win32.Generic
30918

ViRobot
Trojan.Win32.S.Agent.327680.AP
2011.4.7.4223

File size:
320 KB (327,680 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\Documents and Settings\{user}\Local settings\temporary internet files\content.ie5\{random}\bet.exe

File PE Metadata
OS bitness:
Win64

CTPH (ssdeep):
6144:1NPDljpR9JDDsOdJWQGcsa2QHszbRGk5FN11HDfqyIQKp+W62rYo:11DllPJDDj+tcsQHkGk5FNDqyIQ8io

Entry point:
E8, A1, 74, 00, 00, E9, 1E, FE, FF, FF, CC, CC, CC, CC, CC, 80, 7A, 0E, 05, 75, 11, 66, 8B, 9D, 5C, FF, FF, FF, 80, CF, 02, 80, E7, FE, B3, 3F, EB, 04, 66, BB, 3F, 13, 66, 89, 9D, 5E, FF, FF, FF, D9, AD, 5E, FF, FF, FF, BB, 6C, 82, 41, 00, D9, E5, 89, 95, 6C, FF, FF, FF, 9B, DD, BD, 60, FF, FF, FF, C6, 85, 70, FF, FF, FF, 00, 9B, 8A, 8D, 61, FF, FF, FF, D0, E1, D0, F9, D0, C1, 8A, C1, 24, 0F, D7, 0F, BE, C0, 81, E1, 04, 04, 00, 00, 8B, DA, 03, D8, 83, C3, 10, FF, 23, 80, 7A, 0E, 05, 75, 11, 66, 8B, 9D, 5C...
 
[+]

Entropy:
7.0089

Remove bet.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.