01f7a3923f3afd42b4ff59a0e4d9add5b9ce228ca041a2614c5cef8bf6d8a665

Classification: Malicious

01f7a3923f3afd42b4ff59a0e4d9add5b9ce228ca041a2614c5cef8bf6d8a665 is a trojan (Windows executable, 38.0 KB). Detected by 48 antivirus engines.

Detection summary

  • 48 antivirus detections
  • 1 IDS alerts
  • 1 processes observed
  • 2 contacted hosts
  • 3 DNS requests

MITRE ATT&CK associations

Intrusion sets: APT37 (G0067)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2024-10-23 02:00:04 2024-10-23 02:45:09
Apt37 Maltiverse 2023-07-04 04:28:54 2023-07-05 20:50:45 malicious-activity G0067 APT37

Tags

apt evasive exploit hacktool infostealer qakbot

Sample information

Filenames
01f7a3923f3afd42b4ff59a0e4d9add5b9ce228ca041a2614c5cef8bf6d8a665.exe
File type
PE32 executable (GUI) Intel 80386 Mono/.Net assemb ...
Size
38912 bytes
MD5
9d95aa1eaac02a9668a56780dd890c57
SHA-1
269415a0eff8b1e4c59ee0ba6771eb52841eb0ec
SHA-256
01f7a3923f3afd42b4ff59a0e4d9add5b9ce228ca041a2614c5cef8bf6d8a665
First indexed
2023-07-05 20:50:45
Last updated
2024-10-23 02:45:09

Antivirus detections

EngineDetection
LionicTrojan.Win32.Agent.Y!c
MicroWorld-eScanTrojan.GenericKD.67572476
FireEyeTrojan.GenericKD.67572476
ALYacTrojan.GenericKD.67572476
MalwarebytesTrojan.Crypt.MSIL.Generic
VIPRETrojan.GenericKD.67572476
SangforDownloader.Msil.Agent.Vvfy
K7AntiVirusTrojan-Downloader ( 005a77441 )
K7GWTrojan-Downloader ( 005a77441 )
BitDefenderThetaGen:NN.ZemsilF.36270.cm0@ae2jy3o
VirITTrojan.Win32.Genus.RMN
CyrenW32/ABRisk.FHLC-6623
SymantecML.Attribute.HighConfidence
Elasticmalicious (moderate confidence)
ESET-NOD32MSIL/TrojanDownloader.Agent.PIW
APEXMalicious
KasperskyHEUR:Trojan-Downloader.MSIL.Agent.gen
BitDefenderTrojan.GenericKD.67572476
AvastWin32:TrojanX-gen [Trj]
RisingDownloader.Agent!8.B23 (CLOUD)
EmsisoftTrojan.GenericKD.67572476 (B)
ZillyaDownloader.Agent.Win32.519885
TrendMicroTROJ_GEN.R002C0DFM23
McAfee-GW-EditionArtemis!Trojan
SophosMal/Generic-S
GDataTrojan.GenericKD.67572476
WebrootW32.Trojan.Gen
GoogleDetected
MAXmalware (ai score=82)
Antiy-AVLTrojan[Downloader]/MSIL.Agent
GridinsoftTrojan.Win32.Agent.cl
XcitiumMalware@#addw2m6qshps
ArcabitTrojan.Generic.D40712FC
ZoneAlarmHEUR:Trojan-Downloader.MSIL.Agent.gen
MicrosoftTrojan:MSIL/Malgent!MSR
AhnLab-V3Trojan/Win.Generic.C5444297
McAfeeArtemis!9D95AA1EAAC0
VBA32TScope.Trojan.MSIL
Cylanceunsafe
PandaTrj/Chgt.AD
TrendMicro-HouseCallTROJ_GEN.R002C0DFM23
TencentMsil.Trojan-Downloader.Ader.Lzfl
IkarusTrojan-Downloader.MSIL.Agent
MaxSecureTrojan.Malware.73433372.susgen
FortinetPossibleThreat.MU
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_100% (W)

Network contacts

34.117.59.81 104.26.13.205

DNS requests

accept-file.com api.ipify.org ipinfo.io

Process list

NameCommand line
01f7a3923f3afd42b4ff59a0e4d9add5b9ce228ca041a2614c5cef8bf6d8a665.exe