05bc6befa45c61005487004f802ed45110b5be2fc4ac24063dc98b168dfb8801
Classification: Malicious
05bc6befa45c61005487004f802ed45110b5be2fc4ac24063dc98b168dfb8801 is a trojan (application/x-dosexec). Detected by 36 antivirus engines.
Detection summary
- 36 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Intrusion sets: TURLA (G0010)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Snake | ThreatFox Abuse.ch | 2025-02-20 09:37:31 | 2025-02-22 09:43:20 | G0010 Turla | |
| Generic.Malware | Abuse.ch | 2021-06-26 08:40:49 | 2021-06-26 08:40:49 | malicious-activity |
Tags
win.snake ekans snakehoseSample information
- Filenames
- 452b278f614b59c5e8a9160f4c69c91f
- File type
- application/x-dosexec
- MD5
452b278f614b59c5e8a9160f4c69c91f- SHA-1
233d282a8fd95c3aa6e869c3320686a19ecbb60c- SHA-256
05bc6befa45c61005487004f802ed45110b5be2fc4ac24063dc98b168dfb8801- First indexed
- 2021-06-26 10:15:04
- Last updated
- 2026-09-11 02:25:56
Antivirus detections
| Engine | Detection |
|---|---|
| Elastic | malicious (high confidence) |
| MicroWorld-eScan | Trojan.GenericKD.37141500 |
| McAfee | RDN/Generic.rp |
| Cylance | Unsafe |
| Sangfor | Trojan.Win32.Save.a |
| CrowdStrike | win/malicious_confidence_90% (W) |
| BitDefenderTheta | Gen:NN.ZemsilF.34758.zm0@a8VcpTe |
| Symantec | ML.Attribute.HighConfidence |
| ESET-NOD32 | a variant of MSIL/Kryptik.ABQF |
| APEX | Malicious |
| Avast | Win32:RATX-gen [Trj] |
| Kaspersky | HEUR:Trojan-Downloader.MSIL.Seraph.gen |
| BitDefender | Trojan.GenericKD.37141500 |
| Paloalto | generic.ml |
| Ad-Aware | Trojan.GenericKD.37141500 |
| Emsisoft | Trojan.GenericKD.37141500 (B) |
| McAfee-GW-Edition | Artemis!Trojan |
| FireEye | Generic.mg.452b278f614b59c5 |
| Ikarus | Trojan.MSIL.Crypt |
| GData | Trojan.GenericKD.37141500 |
| eGambit | Unsafe.AI_Score_100% |
| Arcabit | Trojan.Generic.D236BBFC |
| AegisLab | Trojan.Multi.Generic.4!c |
| Microsoft | Trojan:Win32/AgentTesla!ml |
| Cynet | Malicious (score: 100) |
| ALYac | Trojan.GenericKD.37141500 |
| MAX | malware (ai score=99) |
| Malwarebytes | Trojan.Agent |
| TrendMicro-HouseCall | TROJ_GEN.R002H0DFN21 |
| SentinelOne | Static AI - Malicious PE |
| MaxSecure | Trojan.Malware.300983.susgen |
| Fortinet | MSIL/Kryptik.ABPO!tr |
| Webroot | W32.Trojan.Gen |
| AVG | Win32:RATX-gen [Trj] |
| Cybereason | malicious.a8fd95 |
| Panda | Trj/GdSda.A |