shebronzy3.1.exe
Classification: Malicious
shebronzy3.1.exe is a malicious file sample (application/x-dosexec, 341.6 KB). Flagged by 38% of antivirus engines (27 detections). Linked to Xloader malware.
Detection summary
- 27 antivirus detections (38% detection ratio)
- 0 IDS alerts
- 3 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: XLOADER (S1207)
Intrusion sets: APT37 (G0067)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Apt37 | Maltiverse | 2023-07-04 04:28:55 | 2023-07-05 20:50:44 | malicious-activity | G0067 APT37 |
| Generic Malware | Hybrid-Analysis | 2023-06-21 14:00:03 | 2023-06-21 14:00:03 | ||
| Formbook | MalwareBazaar Abuse.ch | 2023-06-21 13:30:10 | 2023-06-21 13:30:10 | malicious-activity | S1207 XLoader |
Tags
aptSample information
- Filenames
- shebronzy3.1.exe
- File type
- application/x-dosexec
- Size
- 349775 bytes
- MD5
42a9512c2462575e98db4a30d1388f94- SHA-1
0ab780d8234ab8e7514b186dafb9a6f3f8f88fcc- SHA-256
042a79fca496efba98589c7115c620c116af2ef1e1308a9ab91f21026a5ccd43- First indexed
- 2023-06-21 13:45:11
- Last updated
- 2026-04-04 04:21:13
Antivirus detections
| Engine | Detection |
|---|---|
| Bkav | W32.AIDetectMalware |
| MicroWorld-eScan | Gen:Variant.Nemesis.22782 |
| FireEye | Generic.mg.42a9512c2462575e |
| CrowdStrike | win/malicious_confidence_90% (W) |
| BitDefenderTheta | Gen:NN.ZedlaF.36270.qq4@a0DATIli |
| Symantec | ML.Attribute.HighConfidence |
| Elastic | malicious (high confidence) |
| APEX | Malicious |
| Cynet | Malicious (score: 100) |
| BitDefender | Gen:Variant.Nemesis.22782 |
| Avast | Win32:Malware-gen |
| Emsisoft | Gen:Variant.Nemesis.22782 (B) |
| VIPRE | Gen:Variant.Nemesis.22782 |
| McAfee-GW-Edition | BehavesLike.Win32.Generic.fc |
| Trapmine | malicious.moderate.ml.score |
| Sophos | Generic ML PUA (PUA) |
| GData | Zum.Androm.1 |
| Arcabit | Trojan.Nemesis.D58FE [many] |
| Microsoft | Trojan:Win32/Wacatac.B!ml |
| Detected | |
| AhnLab-V3 | Infostealer/Win.Generic.R563828 |
| McAfee | Artemis!42A9512C2462 |
| MAX | malware (ai score=84) |
| Ikarus | Trojan.NSIS.Agent |
| Fortinet | NSIS/Agent.DCAC!tr |
| AVG | Win32:Malware-gen |
| DeepInstinct | MALICIOUS |
Process list
| Name | Command line |
|---|---|
| shebronzy3.1.exe | |
| shebronzy3.1.exe | |
| cmmon32.exe | |