Malware Analysis Report: rkqiodtl.exe TrojanDropper

Malware Analysis Report Vulnerability Overview File Name: rkqiodtl.exe File Type: EXE executable file File Size: 3.78 MB Threat Score: 25/71 (Medium Risk) Detection Status: Marked as malicious by 25/71 security vendors Threat Tags: - peexe - calls-wmi - executes-dropped-file - detect-debug-environment - overlay Impact Scope Main Threat Types: - Trojan - Dropper Detected Malicious Behaviors: - Calls WMI interface - Executes downloaded files - Detects debugging environment - File overlay technique Security Vendor Detection Results Major Vendors That Detected Malware: Alibaba: TrojanDropper.Win32.Generic.zjdwM4 Avast: Win32:Malware-gen CTX: Exe.trjan.generic Deepinstinct: MALICIOUS GData: Win32.Trojan.Agent.T10P44 Ikarus: Trojan-Dropper.Win32.Agent Kingsoft: Win32.Trojan.Agent.gen MaxSecure: Trojan.Malware.372568456.surgen Microsoft: Trojan.Win32.Tomaloffs AliCloud: Trojan.Win/Agent.gyf AVG: Win32:Malware-gen Cynet: Malicious (score: 99) Fortinet: W32/Agent.TCRth Huorong: Trojan.FakeApp.aaj Kaspersky: UDS:Trojan.Win32.Agent.gen Lionic: Trojan.Win32.Agent.Tic McAfee Scanner: TIF/C258842F.59 Quickheal: Trojan.Agent Vendors That Did Not Detect Threats: TrendMicro, Vipre, ViriBot, WiltSecure, Yandex, Zoner, BitDefenderFalk, Trustlook, Trellix ENS, Acronis, ALTAC, Arcabit, Avira, BitDefender, ClamAV, CrowdStrike Falcon, Elastic, eScan, Google, Jiangmin, K7GW, NANO-Antivirus, Panda, SentinelOne, SUPERAntiSpyware, TEHTRIS, TrendMicro, VBA32, VirIT, Webroot, Xcitium, Zillya, Avast-Mobile, Symantec Mobile Insight, ZoneAlarm by Check Point Remediation Plan 1. Immediate Isolation: Isolate the file from the system to prevent further spread 2. Full Scan: Perform a comprehensive system scan using multiple security vendor tools 3. System Recovery: Restore the system from a clean backup 4. Update Protection: Update all security software to the latest versions 5. Behavior Monitoring: Monitor for abnormal WMI calls and file execution activities 6. Network Monitoring: Check for suspicious network connections and data transfers Technical Details Last Analysis Date: 3 months ago API Key: API key required for automated checks Community Features: Join the community to gain additional insights and crowdsourced detections

Goal Reached Thanks to every supporter — we hit 100%!

Malware Analysis Report: rkqiodtl.exe TrojanDropper