SonicALERT
Search

Sonicwall Signatures

 

Go to All Categories list.


  MalAgent.J_11525
MalAgent.J_11525 is a Trojan. A Trojan is a program that pretends to have a valid use, but in fact modifies the user's computer in malicious ways. Trojans do not replicate or spread to other computers.

Mutexes created
  • Nothing to report


Directory level activity
    • Nothing to report


    File level activity
      • Nothing to report


      Registry level activity
        • Nothing to report


        Library level activity
        • load - library - KERNEL32.DLL
        • load - library - mscoree.dll


        Process API calls used
        • ExitProcess


        Registry API calls used
          • Nothing to report


          System API calls used
          • LdrGetDllHandle
          • LdrGetProcedureAddress
          • LdrGetDllHandle


          Filesystem API calls used
            • Nothing to report

            DLL related data
            Number of DLL's imported = 4
            • KERNEL32.dll
            • USER32.dll
            • GDI32.dll
            • ADVAPI32.dll

            Domains:
            • s.symcb.com with IP - 23.5.245.163
            • sw.symcb.com with IP - 23.5.245.163

            DNS Request:
            • sw.symcb.com
            • s.symcb.com

            HTTP Request:
            • GET URI - http://s.symcb.com/pca3-g5.crl
            • GET URI - http://sw.symcb.com/sw.crl

            Network

            UDP source >> destination
            • 192.168.30.10 >> 192.168.30.255
            • 192.168.30.10 >> 8.8.8.8


            TCP source >> destination
            • 192.168.30.10 >> 23.5.245.163



            VirusTotal
            • Scans show 0 positive out of 61 scanners


            Relevant Information