| MD5 | 244f1c79c853e6d21eed2b131c0b0cdb |
| SHA1 | 20900ed9659c26bc464ed7f409f93ce1c5754c57 |
| Filename | syshost.exe |
| IPs | [64.4.11.37] |
| IPs | [81.171.44.131] |
| Domains | [microsoft.com] [nogctxgzxazti.com] [xivrprrukq.com] [dhdtabbgtbg.com] [bjibqjishixmbh.com] [0.pool.ntp.org] [1.pool.ntp.org] |
| IP Addresses | [64.4.11.37] [81.171.44.131] |
| Antivirus | [Dropper.Generic8.BWTS] |
| [Dropper/Win32.Necurs] | |
| [Necurs.AF] | |
| [PE:Malware.XPACK-HIE/Heur!1.9C48] | |
| [TR/Kazy.243358] | |
| [Troj/Necurs-AU] | |
| [Trojan-Dropper.Win32.Necurs.sht] |