Longcheer.exe

The executable Longcheer.exe has been detected as malware by 12 anti-virus scanners. The file has been seen being downloaded from dlpierrot709.free.fr.
MD5:
b5f14d44569bdc702a26b024bc5b0bcd

SHA-1:
24be5bcbbc2fa5e8e0a66af2adbe64e7216fd85f

SHA-256:
fd84a700646d6cbae43ac8ec748acf38c7e6161e36c5a11b0f92cac2a2494550

Scanner detections:
12 / 68

Status:
Malware

Analysis date:
5/4/2024 4:02:47 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Trojan.VkHost
7.1.1

AVG
Generic19
2014.0.3543

Bkav FE
W32.Clod80c.Trojan
1.3.0.4562

IKARUS anti.virus
Trojan.Win32.VkHost
t3scan.2.2.29

McAfee
Artemis!B5F14D44569B
5600.7181

MicroWorld eScan
Trojan.Win32.VkHost
14.0.0.723

Norman
Suspicious_Gen2.VHXLY
11.20130829

nProtect
Trojan/W32.Agent.659456.BF
13.12.13.01

Panda Antivirus
Generic Trojan
13.08.29.12

Reason Heuristics
Unnamed.Threat.17
14.3.1.0

Trend Micro House Call
TROJ_GEN.R47B1LE
7.2.241

VIPRE Antivirus
Trojan.Win32.Generic
24320

File size:
644 KB (659,456 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\longcheer.exe

File PE Metadata
Compilation timestamp:
10/31/2005 7:21:48 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
12288:EBRkAwJCvTdcGXkgx2BVA5k6TyHyti4mZ/Geh7G0On+C:YR9eG8cwwiue0+C

Entry address:
0x138C

Entry point:
EB, 10, 66, 62, 3A, 43, 2B, 2B, 48, 4F, 4F, 4B, 90, E9, 98, 60, 48, 00, A1, 8B, 60, 48, 00, C1, E0, 02, A3, 8F, 60, 48, 00, 52, 6A, 00, E8, ED, 3B, 08, 00, 8B, D0, E8, 96, 8D, 07, 00, 5A, E8, F4, 8C, 07, 00, E8, CB, 8D, 07, 00, 6A, 00, E8, 30, A2, 07, 00, 59, 68, 34, 60, 48, 00, 6A, 00, E8, C7, 3B, 08, 00, A3, 93, 60, 48, 00, 6A, 00, E9, E3, F2, 07, 00, E9, 5E, A2, 07, 00, 33, C0, A0, 7D, 60, 48, 00, C3, A1, 93, 60, 48, 00, C3, 60, BB, 00, 50, B0, BC, 53, 68, AD, 0B, 00, 00, C3, B9, B4, 00, 00, 00, 0B, C9...
 
[+]

Entropy:
6.5734

Code size:
532 KB (544,768 bytes)

The file Longcheer.exe has been seen being distributed by the following URL.

Remove Longcheer.exe - Powered by Reason Core Security