SonicALERT
Search

Sonicwall Signatures

 

Go to All Categories list.


  MalAgent.J_90185
MalAgent.J_90185 is a Virus. Virus is a type of malware that, when executed, replicates by inserting copies of itself (possibly modified) into other computer programs, data files, or the boot sector of the hard drive

Mutexes created
  • Nothing to report


Directory level activity
    • Nothing to report


    File level activity
    • write - file - C:\WINDOWS\system32\navu32.exe
    • delete - file - C:\DOCUME~1\TestMachine\LOCALS~1\Temp\440aa00057d3acfef7dde570a2b4dd28.bin
    • delete - file - C:\DOCUME~1\TestMachine\LOCALS~1\Temp\440aa00057d3acfef7dde570a2b4dd28.bin


    Registry level activity
      • Nothing to report


      Library level activity
      • load - library - mscoree.dll
      • load - library - mscoree.dll


      Process API calls used
      • CreateProcessInternalW
      • ExitProcess


      Registry API calls used
        • Nothing to report


        System API calls used
        • NtDelayExecution
        • LdrGetDllHandle


        Filesystem API calls used
        • NtOpenFile
        • CopyFileA
        • NtSetInformationFile
        • NtCreateFile
        • NtQueryInformationFile
        • NtReadFile
        • NtWriteFile
        • NtSetInformationFile

        Network

        UDP source >> destination
        • 192.168.30.6 >> 192.168.30.254
        • 192.168.30.6 >> 8.8.8.8


        TCP source >> destination



          Domains:
          • lbss.3322.org with IP - 157.122.62.205

          DNS Request:
          • lbss.3322.org

          HTTP Request:
          • NA

          DLL related data
          Number of DLL's imported = 3
          • ADVAPI32.dll
          • KERNEL32.DLL
          • MSVCRT.dll

          Relevant Information


          © SonicWall 2020 | Privacy Policy | Conditions for use Version: 10.0