× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 29c63f988712f015636e771312ed41c295590188b6c3bea4d3612d480270661b
File name: 29c63f988712f015636e771312ed41c295590188b6c3bea4d3612d480270661b
Detection ratio: 27 / 59
Analysis date: 2019-01-26 11:34:18 UTC ( 3 months, 4 weeks ago ) View latest
Antivirus Result Update
Ad-Aware Trojan.Java.Agent.BDO 20190126
AegisLab Trojan.Java.QRat.4!c 20190126
Arcabit Java.Trojan.Agent.JW 20190126
Avast Java:Malware-gen [Trj] 20190126
AVG Java:Malware-gen [Trj] 20190126
Avira (no cloud) JAVA/Kryptik.xpsei 20190126
BitDefender Trojan.Java.Agent.BDO 20190126
Cyren Trojan.LYAO-0 20190126
DrWeb Java.Downloader.1710 20190126
Emsisoft Trojan.Java.Agent.BDO (B) 20190126
ESET-NOD32 a variant of Java/Kryptik.ZA 20190126
F-Prot Java/Adwind.ABI 20190126
F-Secure Trojan.Java.Agent.BDO 20190126
Fortinet Java/Kriptik.YW!tr 20190126
GData Java.Trojan.Kryptik.LT 20190126
Ikarus Trojan.Java.Adwind 20190126
Kaspersky HEUR:Backdoor.Java.QRat.gen 20190126
MAX malware (ai score=86) 20190126
McAfee Adwind-FDVW.jar!5F4AD59E3FEE 20190126
McAfee-GW-Edition Adwind-FDVW.jar!5F4AD59E3FEE 20190126
eScan Trojan.Java.Agent.BDO 20190126
Qihoo-360 Win32/Backdoor.bd9 20190126
Symantec Trojan.Gen.NPE 20190125
Tencent Java.Backdoor.Qrat.Lmbl 20190126
TrendMicro Backdoor.Java.ADWIND.THOAAGAI 20190126
TrendMicro-HouseCall Backdoor.Java.ADWIND.THOAAGAI 20190126
ZoneAlarm by Check Point HEUR:Backdoor.Java.QRat.gen 20190126
Acronis 20190124
AhnLab-V3 20190125
Alibaba 20180921
ALYac 20190126
Antiy-AVL 20190126
Avast-Mobile 20190126
Babable 20180918
Baidu 20190125
Bkav 20190125
CAT-QuickHeal 20190126
ClamAV 20190126
CMC 20190126
Comodo 20190126
CrowdStrike Falcon (ML) 20181023
Cybereason 20190109
Cylance 20190126
eGambit 20190126
Endgame 20181108
Sophos ML 20181128
Jiangmin 20190126
K7AntiVirus 20190126
K7GW 20190126
Kingsoft 20190126
Malwarebytes 20190126
Microsoft 20190126
NANO-Antivirus 20190126
Palo Alto Networks (Known Signatures) 20190126
Panda 20190126
Rising 20190126
SentinelOne (Static ML) 20190124
Sophos AV 20190126
SUPERAntiSpyware 20190123
TACHYON 20190126
TheHacker 20190125
TotalDefense 20190126
Trapmine 20190123
Trustlook 20190126
VBA32 20190125
ViRobot 20190125
Webroot 20190126
Yandex 20190125
Zillya 20190125
Zoner 20190125
The file being studied is a Java Archive! Typically a JAR file contains the class files and auxiliary resources associated with applets and applications.
Archive metadata
Total directories 0
Maximum directory depth 0
Total files 45
Maximum member date 2019-01-16 09:32:00
Minimum member date 2019-01-16 09:31:54
Manifest
Java packages
Interesting strings
Embedded files by type
binary 32
ascii 1
class 12
Embedded files
The file being studied is a compressed stream! Details about the compressed contents follow.
Contained files
Compression metadata
Contained files
45
Uncompressed size
700431
Highest datetime
2019-01-16 09:32:00
Lowest datetime
2019-01-16 09:31:54
Contained files by extension
MF
1
Contained files by type
Java Bytecode
12
unknown
1
File identification
MD5 35ed3a6ad22014c3716a2232bd193a2c
SHA1 77c257618925bd1ee8b692952fbfdf1d3e47f8f6
SHA256 29c63f988712f015636e771312ed41c295590188b6c3bea4d3612d480270661b
ssdeep
12288:DNibkbJWCUOSZ98aeuUGnnCqKg7Mewl0JKjnxuf+NexDC1j2sbaQeMUWhwhmn:BbbJWWSZ+fuHn1KMJunXf1j2/aUWhbn

File size 680.6 KB ( 696905 bytes )
File type JAR
Magic literal
Zip archive data, at least v2.0 to extract

TrID ZIP compressed archive (80.0%)
PrintFox/Pagefox bitmap (var. P) (20.0%)
Tags
jar

VirusTotal metadata
First submission 2019-01-16 11:10:15 UTC ( 4 months, 1 week ago )
Last submission 2019-01-16 11:10:15 UTC ( 4 months, 1 week ago )
File names payment.Ref%20302.jar
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!