| K7 Detection Name | Affected OS | Prevalence | AV Definition Version |
|---|---|---|---|
| Trojan ( 006e88581 ) | Windows | Low | 14.82.60998 |
| MD5 | 7a02df308e04e2b4a04bef02ac004a33 |
| SHA256 | 080b25d8661857e353abb7369294e6ad5c2e246bad0829d31970f56ebaa0421b |
| File Size | 37,748,736 bytes |
| Packer Information | N/A |
| First Seen | 02-10-2026 |
| Last Seen | 14-10-2026 |
| Aliases | TrojanDownloader.Agent.IRT |
Behavior Details
1. Files Added/Modified:
Folder: C:\16221522092036.184.vhdx\
• ARPHADUMP.DLL
• 1321162104.EXE
Folder: C:\16221522092036.184.vhdx\[SYSTEM]\
• $Bitmap
• $LogFile
• $MFTMirr
• $MFT
• $UpCase
• $Boot
• $AttrDef
Folder: C:\16221522092036.184.vhdx\[SYSTEM]\$Extend\$RmMetadata\$TxfLog\
• $Tops
• $TxfLog.blf
• $TxfLogContainer00000000000000000002
• $TxfLogContainer00000000000000000001
C:\Windows\SystemTemp\__PSScriptPolicyTest_m04gcjjf.l04.psm1
C:\16221522092036.184.vhdx\System Volume Information\WPSettings.dat
2. Network Activity:
• DNS Requests:
tttkkkssww[.]com
3. Services & Scheduled Tasks Created:
Service: WSearch
Service: BITS
Removal Instructions
1. Update K7 security to the latest version.
2. Restart the machine.