home

brasfoot2014.exe

The executable brasfoot2014.exe has been detected as malware by 2 anti-virus scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
MD5:
264a6932f75dc94c64eb219061a40d40

SHA-1:
1a5948937d40cf9e03be29e46433ea44afe6c93a

SHA-256:
cdaa717b8ed18822889efd606605911acb8274b14ed45bd08ca3816a9df6b4da

Scanner detections:
2 / 68

Status:
Malware

Analysis date:
4/23/2024 9:55:33 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
(M)
16.6.5.12

Trend Micro House Call
TROJ_GEN.F47V0308
7.2.120

File size:
7 MB (7,290,660 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\brasfoot2014.exe

File PE Metadata
Compilation timestamp:
2/7/2004 3:26:11 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:fuiF3HhV9LeKREyTA4gs8r89pH3nK9EkQZxLN92QNAx3PgVRsH:f9FXdLeOEyTqs8r8DH3K9EkgDEGAFPMm

Entry address:
0x3F88

Entry point:
83, EC, 0C, 53, 55, 56, 57, C7, 44, 24, 10, 70, 92, 40, 00, 33, DB, C6, 44, 24, 14, 20, FF, 15, 2C, 70, 40, 00, 53, FF, 15, 84, 72, 40, 00, BE, 00, 54, 43, 00, BF, 00, 04, 00, 00, 56, 57, A3, A8, EC, 42, 00, FF, 15, C4, 70, 40, 00, E8, 8D, FF, FF, FF, 8B, 2D, 90, 70, 40, 00, 85, C0, 75, 21, 68, FB, 03, 00, 00, 56, FF, 15, 5C, 71, 40, 00, 68, 68, 92, 40, 00, 56, FF, D5, E8, 6A, FF, FF, FF, 85, C0, 0F, 84, 57, 01, 00, 00, BE, 20, E4, 42, 00, 56, FF, 15, 68, 70, 40, 00, 68, 5C, 92, 40, 00, 56, E8, 9C, 28, 00...
 
[+]

Code size:
23 KB (23,552 bytes)

The file brasfoot2014.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/1a5/948/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74757&instance=softonic_br&type=PROGRAM&Expires=1486093091&Signature=FQL31FT~1cFGC1By1~oabQdopHUOH3KVuow9Q9eS95yeUUZG3R7PVZZhyiFMFRHFfRV9UJVR84L5ACI1wwHv3ImayQWJDjzICKFDoU9ce1-ULTFSxYJf9cgB0SJjtQxo6NHgKAzWNuGS~na7YJMlxJPy23VP0JueWw8BpmybDMQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=brasfoot2014.exe

http://gsf-cf.softonic.com/1a5/948/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74757&instance=softonic_br&type=PROGRAM&Expires=1481426709&Signature=bt-BJ-c-bCXIzWUeWiKSf0o7JEs9hHlojRjaxuzjY8D7fZRbsh1tHD10Y3Z1ujgTni3ZxX30ZwaJtDJYhQ~4MIvbxGL-NtiPYC-XQfx1aGez9DVHMSJ3S3LayRSaKwZTkZrJESpKFc6p5ScHZoHldO~ig9n0J79EoUNRc970mfM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=brasfoot2014.exe

http://gsf-cf.softonic.com/1a5/948/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74757&instance=softonic_br&type=PROGRAM&Expires=1428039442&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=gvslDyzmoMqP6P1n0dV5yP-LUbTUxTIi5y3veWVsfJAir~ivsEN0Sz7C4WfF4jnO78M6QYswdBmF5ohzshAMYVGWJp4A2H~XZosDGHx4CXbYzet65H1mpS~e8fbBZZQSpdKoOBtSdgVnTDmg5ldsqr9AcWi4yBH8X7ozMkXxb8E_&filename=brasfoot2014.exe

http://gsf-cf.softonic.com/1a5/948/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74757&instance=softonic_br&type=PROGRAM&Expires=1476492945&Signature=O20AIzemPBxQB8CYpFnZTAYoUCb4N5FX8T7rNX~e9SJ4ajrNkfioLOmtz1d8QsWN-S2wmk3jCvzMaYd3JbQlOCi06yKsONQuO4Volmfwnj50fD~BDStFVZHhVD3VkWCZ7-z2x0ou8KWGrH5x58bEELEcnIPzr-aoK1k4-Ndhugg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=brasfoot2014.exe

http://gsf-cf.softonic.com/1a5/948/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74757&instance=softonic_br&type=PROGRAM&Expires=1476751076&Signature=J6ZkQRwacP2zvqVSOcLzpmU5GhKKBEoLsEGIkdWIBUNPp4bXy661efqGwCivLl8yd0yuLqCsZzsju0r-yUx4tRBPlbmVu7mBTHyRbLQHfne72DlMNF3rZOgx7jCi7xpLK1Guk6nOaILMDGgWiE3slMZ8luKFgUKrlWcBA0CFbqc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=brasfoot2014.exe

http://gsf-cf.softonic.com/1a5/948/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74757&instance=softonic_br&type=PROGRAM&Expires=1481796906&Signature=S8RALWwT1vlYum~KUobu2kXpkzuo6RwIqE8EJ2ZM0yIf2251V10TIWBGtD7d-mfYxPWONAblq1dUBgflFIlNo0OFEGTq4IT5Lzg3ItHAVtY9ZOjhwrvHf-egsILhOIVSLVyMFCrLS8q~WtQ9DAycKPrf2-0JQx4Jv-EJMKMEjdU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=brasfoot2014.exe

http://gsf-cf.softonic.com/1a5/948/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74757&instance=softonic_br&type=PROGRAM&Expires=1457165195&Signature=Ql8oAgct7U6qXbl0bGQaWrj~MfSdUgchiBUzP2a1wS7C1pwtKq1oQ2e~7XcF9OttHhvYoZxcRFWnRlPJI2wD9xKm-oAa5jldZSc6k-0epJaALEJfVSJoVfyLHcYUlKRx6jBSn1CjMChia49Vmf-v2O9Ax4Xfu9Aa0lpktm-NEJU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=brasfoot2014.exe

http://gsf-cf.softonic.com/1a5/948/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74757&instance=softonic_br&type=PROGRAM&Expires=1466505052&Signature=grWKpl9m-2iCjmYiyu4hc7bJ-zigZX619NsGBDx~RgSGKS5rAWN9B-5Ff907sBaTb876FFj~BOtnahWWmveWop6O4ruzWDGJgZyLejvrLngwN6eASQNWN9hexjE0Q098AIjmCqOiadfkEU1u-V~-XFVJYDhW4zrMJRVgsGvwJOI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=brasfoot2014.exe

http://ccs.infospace.com/ClickHandler.ashx?ld=20141221&app=1&c=bittorrenty1a&s=bittorrenty1&rc=bittorrenty1a&dc=&euip=186.232.226.243&pvaid=8e51b295f11a424aa2b205ccd2a456f1&dt=Desktop&fct.uid=feca8dddc03f4f7b89e847437eaca958&en=iLfFw5Gw6U9UGRxPFrsYkBS7w2hqm81Hq9j7sXxifeoqCtTLSpjOEhzfiMDD/rWo&du=brasfoot.com/download-brasfoot-2014.php&ru=http://.../download-brasfoot-2014.php&ap=1&coi=771&cop=main-title&npp=1&p=0&pp=0&ep=1&mid=9&hash=B80CE6891B69886AB93C7B154AB6B12B

http://gsf-cf.softonic.com/1a5/948/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74757&instance=softonic_br&type=PROGRAM&Expires=1455682002&Signature=HkU24zdHVm0k1SUrpxoWyGAUwRCta1R5IOThJ3GvZ~THwNL2vaohotniXw31~rlL3Tr1shnONXMHplE~mkGudiogBExMvu3aCjsovuRv1eHUDuAxEYsJSy1IoMT5BmVJzD3mzrT7OgdK59WAYHwXL03gmn4OuiDtdu2RUd~sHGM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=brasfoot2014.exe

http://gsf-cf.softonic.com/1a5/948/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74757&instance=softonic_br&type=PROGRAM&Expires=1478401568&Signature=KvU4hJcmdDfN8TJe5Vf1v2fYdMm6Rm1Daqtn2LkYWqAuaHP7mH8ng8adsCDxhyHKNhqaKsZZ26PySGG0QSwT7yrRSBdwlTLUWm3rJTyfVAiEhSHbtLxMVAnVb-Cp4TmLXle6228gVK9mbW~GxyDu25HKhyzI06dJTgjAmHk4Aqw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=brasfoot2014.exe

http://gsf-cf.softonic.com/1a5/948/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74757&instance=softonic_br&type=PROGRAM&Expires=1459079388&Signature=P6lbQS7fMp9qXBLIcWzSXwBKZYg619EFLu5XqDIoVjXJAz-ht12-roi2B7X9~hWJqzoCX-guIUrKVbbO-RbwCDxai6TW-z565~eDvx4g12YkOteWyB2pL7EYWgfC89OBr3Sgx0BYKOGOpkLCO12eE5jPLtkoaOmrcyN7TaoiYHo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=brasfoot2014.exe

http://ccs.infospace.com/ClickHandler.ashx?ld=20150522&app=1&c=airziphosted&s=airzip&rc=Airziphosted&dc=&euip=179.98.204.66&pvaid=50eeeca0814a43689c5fb1e140f6267c&dt=Desktop&fct.uid=e945b7ee6d6c467d9dc1b497208c7ec2&en=L3uXZvn7lGF J7ci1QCbRRmYxNKoXGrwRc4 RpZGyqXHcwwvo6YaTffPQ7suqrf9&du=brasfoot.com/download-brasfoot-2014.php&ru=http://.../download-brasfoot-2014.php&ap=1&coi=771&cop=main-title&npp=1&p=0&pp=0&ep=1&mid=9&hash=75DDE4557B1C8019283E11DE29D2EF4D

http://gsf-cf.softonic.com/1a5/948/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74757&instance=softonic_br&type=PROGRAM&Expires=1469934032&Signature=Tbq~q5AKRgXvvFE9loAsF1ODtCjDZGN9kJoLiAspvqh8vKOms6m-zTQTgYufPlfvFplwy3cm6ldfUq84mcu~u5UFYrU7U5ZPYpCILi32QyOjm8tqN6dpEzZGzqCCdDAGVzxE30NFFNYuN7fI7J3ekWJImTtqOgxfYFWpDfZDWuo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=brasfoot2014.exe

http://gsf-cf.softonic.com/1a5/948/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74757&instance=softonic_br&type=PROGRAM&Expires=1476353048&Signature=EPZV3aGO8LE~RY7cI55m~ngZ74KG6ksjO9M4O6lLGDJmXNezG4oq2XBLASlAFVr6pCi0cu~uU40QwTKrber267A9eQ5jsuRw1-LcYhM29lDeMVcpNDvBrbbs~o~h9HzkB7XP7rR3tWs36vRiLE~e91~wltCABE~RbncvPxkcRHk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=brasfoot2014.exe

http://gsf-cf.softonic.com/1a5/948/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74757&instance=softonic_br&type=PROGRAM&Expires=1455855835&Signature=RP5jYVSXuL4lOJIwyFpzxFOR-3LQLlfPol7EueX2azsAKEVYzI4Euqus8lGkWxrtrr1665HZomg0vK4ZaUa-Ev4lv4CZaEtKBwZ~jfBpQkqgAlCcH~lS9rsJeHfVdglbE8VvD04NndGpree--wDP8GfBSMYqmIIaBdfEQhkByVM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=brasfoot2014.exe

http://gsf-cf.softonic.com/1a5/948/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74757&instance=softonic_br&type=PROGRAM&Expires=1479164350&Signature=dMQ4zjt4dxRt7QEe86w1TffLLDjQHgHrBDuEaCZ2xf9MEA1GHx8UPoWbKXEZbPAkWNZtked8x8xmufJZDggwdQnx57KxFeD1R7sxiNZ8xWpUtdklb2icsZSL1p3lnanhQFC9whFg5DAAQvKCt5RzfwaL1aw83kB~~0FJTM~o2sw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=brasfoot2014.exe

http://gsf-cf.softonic.com/1a5/948/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74757&instance=softonic_br&type=PROGRAM&Expires=1470545680&Signature=PMwA0uZ1R-fH9WcAexlTIPZ7LDto1mqgj5CmfBKMFiP37s8CHL~wbyEkcim8N9TIay3lXnAsUeul8ywgWc4ZP-kzYV~4087yjAhG1cyNOp72glXsiMFjK2JLYCAIQpz-Gw6yHPDU7D-0MvtizMk1p~Ew3GdEql5v6yfCnAgg1lU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=brasfoot2014.exe

http://gsf-cf.softonic.com/1a5/948/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74757&instance=softonic_br&type=PROGRAM&Expires=1476693987&Signature=c~0aJRRUHmSM0bBWQgeUBK5oGkrf4ldwGOAJLXbRG3023U8RCuC8t~ce0xb4jU0YO2QqyVvLzCSbyU~dl5x4o53fYhibTMyj2GLy6g50rxGTHrmss9f0DZXQh8N-aQdGsLhfXOhNR6fH63cWTHGghjfwbdL5OM0Ljuh7CNeuVow_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=brasfoot2014.exe

http://gsf-cf.softonic.com/1a5/948/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74757&instance=softonic_br&type=PROGRAM&Expires=1457424389&Signature=OoNvXFrNmaxZH9B44b-Co9kwldEqIrVyg1lkn4d5Zl~iDUvmEnDKx812c3FM8c82kXyBZjv2EBoJbDe5kv3ECRkxwhnR7rpPw7l~J6tUOlpv6uXugw4YxXvm-cbJV8pkChw9TsK8ypSEX9~PLIZ7WSIuLYIJndJMttkZbjMEYbE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=brasfoot2014.exe

http://ri.search.yahoo.com/_ylt=A0LEVvPcClBVvTMArScf7At.;_ylu=X3oDMTByMG04Z2o2BHNlYwNzcgRwb3MDMQRjb2xvA2JmMQR2dGlkAw--/RV=2/RE=1431337821/RO=10/RU=http://brasfoot.com/download-brasfoot-2014.php/.../RS=EJbkJ.on_.YLAif7PEPnOypPJds-

http://ri.search.yahoo.com/_ylt=A0LEViNXJiBVSTsAEX0f7At.;_ylu=X3oDMTByMG04Z2o2BHNlYwNzcgRwb3MDMQRjb2xvA2JmMQR2dGlkAw--/RV=2/RE=1428199128/RO=10/RU=http://brasfoot.com/download-brasfoot-2014.php/.../RS=X4JHEvOS_OTHgSqSPelmAchuaZg-

http://gsf-cf.softonic.com/1a5/948/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74757&instance=softonic_br&type=PROGRAM&Expires=1468287440&Signature=Q0iEkkGX58acUqjP05Wv5jxY~6ELUma9LbfeAvdnDYZjHnzpwvffaU8ud~-9kjQdrho8QpWV32qg6V3iaMdgNR-AYZ6rYdSuyDay857xbqOvw7gfFWVvIyaEJ640aKlxlUckEckdTTU0pVhv9SLgIouo-xh5jtT-lv5kb9VQnoc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=brasfoot2014.exe

http://gsf-cf.softonic.com/1a5/948/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74757&instance=softonic_br&type=PROGRAM&Expires=1478168829&Signature=c7hHNto8D-DiUlw7toeI~pblvbrPEaEOb7Ukfy3YGvAOSy7x0ZJ55N2jrS5HrX75gbUGXHcDsxZG7iZPzbulvr0-RXP0UUBIcZqXzZ~3Ht-jBkMgBUMaqY47YHL~wpKvkGVEAfMM8~J2oUwM4MGtS-z8IRDGwuJmX3eN-CRKZxs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=brasfoot2014.exe

http://gsf-cf.softonic.com/1a5/948/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74757&instance=softonic_br&type=PROGRAM&Expires=1430047175&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=gebkRNNfYfrBJTNdD20ysuzrcqB5LYgt9tIsseJNdkmleGtUa~qhCCebleRczJE2fsfNAJtIKrq3oezg47l2pf10KNEuAKUzsBQ1OHScD4uC9CRZ2SYxvNI5ufwimyPQgoxuRPr3zu2lA3JgdeCC-j50a0eO-DiqNEJFTjS7kHU_&filename=brasfoot2014.exe

http://gsf-cf.softonic.com/1a5/948/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74757&instance=softonic_br&type=PROGRAM&Expires=1478431147&Signature=YSC8xcFdh5XqFEcKf6rzXrOzIoOW5QDvXzloncEOnpScUoZQ3j6P2VbWKb~wvhH6jGapGlb2G7wlhagyr1F28W5zoaRfDRyRjSZlJ7dks9KqF8amYJ6KgLBwOHecqP-enhjnXrYNa7e4RkH9q~59vLmazhxND5Wq1v6m1jAgiyk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=brasfoot2014.exe

https://brasfoot.softonic.com.br/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMCwgnP4SN6ceDryJz7PbJv3FQNYWEuR8Z8QB0MlMcx99PkYP74/B2FkyfePz2mRhl M/.../mpq5 B4x7jSVTGdnE8N IBMaExIr644eLdkX00OT8ZppEE=

http://gsf-cf.softonic.com/1a5/948/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74757&instance=softonic_br&type=PROGRAM&Expires=1447880530&Signature=NPKvdBdkaC6rLN4~Kv9K~PmkL85o5BiQYJkRvCVVg8PSEj0wKF2OcyaESsT-m4CqbLMnXI56MJeEs5vUChiKDI4vscO6YYFXnXsRdm9dbpLSj5~Hqc1-6IBekMitFzery2Xw3Zo45ta--I34IEqFGWgreN0g9OWZUdnzaWoK-As_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=brasfoot2014.exe

http://gsf-cf.softonic.com/1a5/948/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74757&instance=softonic_br&type=PROGRAM&Expires=1431770695&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=M7~XUI5oWvqOrrDdKb~QbQ1cQM7e0nypJqVSCxfP-~kAgt4SbSq87d7k9aV4dmAHeNY3NNRv73kPSaaOj6UQFsKGg3W8INcMeyeHYejyR50aj~ne7mryNCEdnYImgGSDRz0HKZz6hux-Lf7HpWjjLs1TzbXmwEqInVUUjB2Biko_&filename=brasfoot2014.exe

http://gsf-cf.softonic.com/1a5/948/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74757&instance=softonic_br&type=PROGRAM&Expires=1436058235&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=cvjmBEhCvUgRpxvh-sSD~SxHJoyY~lD6we0UBGjyJ6~QT-QvdysTPb2xIsreNXI5XYtJ4GcnDT-yIjHYZceEwixIrSScXdpPuwX8b9-Khd4sR0z79hYdE~I2DBv9tyi9~RUOk2vVB0wdVwZKD3MHMXdYFdq-rANGs3aG1oDB4RE_&filename=brasfoot2014.exe

Latest 30 of 77 download URLs

Remove brasfoot2014.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.