Classification: Malicious
wnelbcu.exe is a malicious file sample. Reported by 1 threat source, last seen 2023-11-17. Detected by 51 antivirus engines.
Detection summary
- 51 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Backdoor |
VM-Ray |
2023-11-17 13:22:51 |
2023-11-17 13:22:51 |
|
|
| Keylogger |
VM-Ray |
2023-11-17 13:22:51 |
2023-11-17 13:22:51 |
|
|
| Trojan |
VM-Ray |
2023-11-17 13:22:51 |
2023-11-17 13:22:51 |
|
|
Sample information
- Filenames
- wnelbcu.exe
- File type
- PE32 executable (GUI) Intel 80386, for MS Windows
- SHA-256
055f2aded8e68d0e5ef3231e45cdc63d97c830684226816291d8525cf4e42c98- First indexed
- 2023-11-17 11:23:30
- Last updated
- 2026-09-03 01:04:20
Antivirus detections
| Engine | Detection |
|---|
| ALYac | Gen:Trojan.Heur.0n1@sD6Rk4di |
| APEX | Malicious |
| AhnLab-V3 | Malware/Gen.Generic.R621768 |
| Antiy-AVL | Trojan/Win32.AGeneric |
| Arcabit | Trojan.Heur.E5B819 |
| Avira | TR/Dropper.Gen |
| BitDefender | Gen:Trojan.Heur.0n1@sD6Rk4di |
| BitDefenderTheta | AI:Packer.5CF08FD41C |
| Bkav | W32.AIDetectMalware |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cybereason | malicious.212d8e |
| Cylance | unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.PWS.Stealer.379 |
| ESET-NOD32 | a variant of Win32/Injector.EYU |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Trojan.Heur.0n1@sD6Rk4di (B) |
| F-Secure | Trojan.TR/Dropper.Gen |
| FireEye | Generic.mg.4cebb1af3847685f |
| Fortinet | W32/Injector.MQI!tr |
| GData | Gen:Trojan.Heur.0n1@sD6Rk4di |
| Google | Detected |
| Ikarus | Trojan.Win32.VBKrypt |
| Jiangmin | Trojan.VBKrypt.aisk |
| K7AntiVirus | Trojan ( 0055e3991 ) |
| K7GW | Trojan ( 0055e3991 ) |
| Kaspersky | Trojan.Win32.VBKrypt.dppe |
| Kingsoft | malware.kb.a.1000 |
| MAX | malware (ai score=88) |
| Malwarebytes | Malware.AI.3462187387 |
| MicroWorld-eScan | Gen:Trojan.Heur.0n1@sD6Rk4di |
| NANO-Antivirus | Trojan.Win32.Stealer.efbifd |
| Panda | Trj/Genetic.gen |
| Rising | Malware.FakeJPEG!1.9C79 (CLASSIC) |
| Sangfor | Suspicious.Win32.Save.vb |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win32.PWSSpyeye.tt |
| Sophos | ML/PE-A |
| Symantec | ML.Attribute.HighConfidence |
| Tencent | Malware.Win32.Gencirc.10bf4ae0 |
| Trapmine | malicious.high.ml.score |
| VBA32 | SScope.Trojan.VBRA.6299 |
| VIPRE | Gen:Trojan.Heur.0n1@sD6Rk4di |
| Varist | W32/Trojan-Gypikon-based.DM2!Ma |
| Webroot | W32.Trojan.Gen |
| Xcitium | TrojWare.Win32.VBKrypt.cjb@4vg4ed |
| Yandex | Trojan.VBKrypt!eB9e6GVddrE |
| Zillya | Trojan.VBKrypt.Win32.255350 |
| ZoneAlarm | Trojan.Win32.VBKrypt.dppe |
| tehtris | Generic.Malware |