unknown_file

Classification: Malicious

unknown_file is a malicious file sample. Linked to Hermeticwiper malware. Reported by 3 threat sources, last seen 2026-08-26.

Detection summary

  • 81 antivirus detections
  • 0 IDS alerts
  • 1 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: HERMETICWIPER (S0697)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Cyber Threat Alliance 2026-08-11 10:11:08 2026-08-26 10:18:09 malicious-activity
Generic Malware Hybrid-Analysis 2024-02-28 18:45:04 2024-02-28 18:45:04
HermeticWiper MalwareBazaar Abuse.ch 2022-02-24 10:43:40 2022-02-24 10:43:40 malicious-activity S0697 HermeticWiper
Generic.Malware MalwareBazaar Abuse.ch 2022-02-24 10:43:40 2022-02-24 10:43:40 malicious-activity

Tags

apt backdoor botnet infostealer mirai njrat petya qakbot ransomware rat shamoon spam spyware trojan worm

Sample information

Filenames
unknown_file, 0385eeab00e946a302b24a91dea4187c1210597b8e17cd9e2230450f5ece21da
File type
application/x-dosexec
Size
117000 bytes
MD5
84ba0197920fd3e2b7dfa719fee09d2f
SHA-1
912342f1c840a42f6b74132f8a7c4ffe7d40fb77
SHA-256
0385eeab00e946a302b24a91dea4187c1210597b8e17cd9e2230450f5ece21da
First indexed
2022-02-24 12:15:08
Last updated
2026-04-17 16:15:45

Antivirus detections

EngineDetection
ALYacTrojan.Agent.Wiper
AVGWin32:DangerousSig [Trj]
AhnLab-V3Trojan/Win.Hermeticwiper.R478319
AlibabaTrojan:Win32/HermeticWiper.a
Antiy-AVLTrojan/Win32.Unit8200
ArcabitTrojan.Generic.D2582870
AvastWin32:DangerousSig [Trj]
AviraTR/KillDisk.EZ
BitDefenderTrojan.GenericKD.39331952
BkavW32.Common.8980F1D4
CAT-QuickHealTrojan.HrmetcWipr.S26876287
ClamAVWin.Malware.HermeticWiper-9940039-0
CrowdStrikewin/malicious_confidence_100% (W)
Cylanceunsafe
CynetMalicious (score: 99)
DeepInstinctMALICIOUS
DrWebTrojan.KillDisk.14086
ESET-NOD32a variant of Win32/KillDisk.NCV
ElasticWindows.Wiper.HermeticWiper
EmsisoftMalCert-S.OE (A)
F-SecureTrojan.TR/HermeticWiper.A
FireEyeTrojan.GenericKD.39331952
FortinetW32/KillDisk.NCV!tr
GDataWin32.Malware.HermeticWiper.B
GoogleDetected
IkarusTrojan.Win32.KillDisk
JiangminTrojan.Agent.dvmb
K7AntiVirusTrojan ( 0058ec201 )
K7GWTrojan ( 0058ec201 )
KasperskyTrojan.Win32.HermeticWiper.b
LionicTrojan.Win32.HermeticWiper.4!c
MAXmalware (ai score=100)
MalwarebytesMalware.AI.3166066162
MaxSecureTrojan.Malware.140734350.susgen
McAfeeGeneric .jt
MicroWorld-eScanTrojan.GenericKD.39331952
MicrosoftTrojan:Win32/FoxBlade.A!dha
NANO-AntivirusTrojan.Win32.HermeticWiper.jmoiqj
PandaTrj/Genetic.gen
RisingTrojan.HermeticWiper!1.DC1D (CLASSIC)
SkyhighBehavesLike.Win32.HWipr.ch
SophosMal/KillDisk-A
SymantecTrojan.KillDisk
TACHYONTrojan/W32.HermeticWiper.117000.B
TencentMalware.Win32.Gencirc.1186d1ab
TrendMicroTrojan.Win32.KILLDISK.YACBX
TrendMicro-HouseCallTrojan.Win32.KILLDISK.YACBX
VBA32Trojan.KillDisk
VIPRETrojan.GenericKD.39331952
VaristW32/KillDisk.A.gen!Eldorado
ViRobotTrojan.Win32.S.Agent.117000.A
VirITTrojan.Win32.HermeticWiper.A
WebrootW32.Trojan.Hermeticwiper
XcitiumMalware@#4faeagq406ev
YandexTrojan.KillDisk!R/DgT0bA2/s
ZillyaTrojan.KillDisk.Win32.278
ZoneAlarmTrojan.Win32.HermeticWiper.b
Elasticmalicious (high confidence)
McAfeeArtemis!84BA0197920F
SymantecTrojan.Certbypass
KasperskyTrojan.Win32.KillDisk.gk
BitDefenderGen:Variant.Lazy.140164
MicroWorld-eScanGen:Variant.Lazy.140164
RisingTrojan.MalCert!1.DC20 (CLOUD)
McAfee-GW-EditionArtemis!Trojan
FireEyeGen:Variant.Lazy.140164
IkarusWin32.Outbreak
MAXmalware (ai score=89)
MicrosoftDoS:Win32/FoxBlade.A!dha
ZoneAlarmTrojan.Win32.KillDisk.gk
GDataGen:Variant.Lazy.140164
CylanceUnsafe
PandaTrj/CI.A
BkavW32.AIDetectMalware
CTXexe.trojan.killdisk
KingsoftWin32.Trojan.KillDisk.a
LionicTrojan.Win32.KillDisk.4!c
MalwarebytesMalware.AI.2850721364
McAfeeDti!0385EEAB00E9
Paloaltogeneric.ml
huorongTrojan/KillDisk.bf

Process list

NameCommand line
unknown_file.exe