Trojan:Win32/Alevaul!rfn - ThreatCheck.sh

user@threatcheck.sh ~ threat-analysis

bash

$ analyze-threat Trojan:Win32/Alevaul!rfn

Trojan:Win32/Alevaul!rfn - Windows Defender threat signature analysis

$ cat analysis.txt

=== THREAT ANALYSIS REPORT ===

Threat Name: Trojan:Win32/Alevaul!rfn

Classification:

Type:Trojan

Platform:Win32

Family:Alevaul

Detection Type:Concrete

Known malware family with identified signatures

Suffix:!rfn

Specific ransomware family name

Confidence:Very High

False-Positive Risk:Low

Concrete signature match: Trojan - Appears legitimate but performs malicious actions for 32-bit Windows platform, family Alevaul

VDM Static Detection:

No detailed analysis available from definition files.

Known malware which is associated with this threat:

Filename: 4cfa51131a22c820002eee18cb9f52ad189337db320a5790045c463d6d88a446.hta

4cfa51131a22c820002eee18cb9f52ad189337db320a5790045c463d6d88a446

31/01/2026

Filename: 75d25ad8cedb8db31f2b34b87b8ec67dbd1893ddbd0ac551a96e8834e9e181ee.bin

75d25ad8cedb8db31f2b34b87b8ec67dbd1893ddbd0ac551a96e8834e9e181ee

22/01/2026

Filename: 1a5027adf99076470444c5ffdd83a4313ab1d21827700699d0ee6ab1337beb70

1a5027adf99076470444c5ffdd83a4313ab1d21827700699d0ee6ab1337beb70

20/01/2026

Filename: tmpqrkyaca5.bin

67c785e49785980de1bb93d9f565d417a512504e4200451d862b53c758b4bd6d

09/01/2026

Filename: 5118f59ff6e3a48aafc7251646c80cb9cc718ffc610744739fa44e4f5bb0a9d2

5118f59ff6e3a48aafc7251646c80cb9cc718ffc610744739fa44e4f5bb0a9d2

30/12/2025

=== END REPORT ===

$ reanalyze-threat

This analysis was last updated on 11/11/2025. Do you want to analyze it again?

$ ls available-commands/

user@threatcheck.sh:~$ ▊

Trojan:Win32/Alevaul!rfn - Windows Defender Threat Analysis