09242199ea7b1ac0b857aa56d25281c147a2be40224cd92def62d4d8e4c1610b
Classification: Malicious
09242199ea7b1ac0b857aa56d25281c147a2be40224cd92def62d4d8e4c1610b is a trojan (Windows executable). Detected by 80 antivirus engines.
Detection summary
- 80 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 1 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: SOMBRAT (S0615)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-08-10 20:45:04 | 2026-08-10 20:45:04 | malicious-activity | |
| SombRAT | ThreatFox Abuse.ch | 2024-06-25 15:37:50 | 2024-06-27 15:22:28 | S0615 SombRAT |
Tags
win.sombrat evasiveSample information
- Filenames
- 09242199ea7b1ac0b857aa56d25281c147a2be40224cd92def62d4d8e4c1610b
- File type
- PE32 executable for MS Windows 4.00 (GUI), Intel i ...
- MD5
62d8e9e34d2caec12341d59a7cf84606- SHA-1
b5c347daf15c0752b1f302d3d9b47af076c49a8d- SHA-256
09242199ea7b1ac0b857aa56d25281c147a2be40224cd92def62d4d8e4c1610b- First indexed
- 2024-06-25 16:19:33
- Last updated
- 2026-08-10 20:45:04
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.GenericKDZ.102657 |
| APEX | Malicious |
| AVG | Win32:DropperX-gen [Drp] |
| AhnLab-V3 | Trojan/Win.AsyncRAT.R609293 |
| Antiy-AVL | Trojan/MSIL.AsyncRAT |
| Arcabit | Trojan.Generic.D19101 |
| Avast | Win32:DropperX-gen [Drp] |
| Avira | HEUR/AGEN.1371145 |
| BitDefender | Trojan.GenericKDZ.102657 |
| BitDefenderTheta | Gen:NN.ZemsilF.36808.em0@a8cVRmf |
| Bkav | W32.AIDetectMalware.CS |
| CAT-QuickHeal | Trojan.GenericFC.S30117478 |
| ClamAV | Win.Packed.Razy-9807129-0 |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cybereason | malicious.34d2ca |
| Cylance | Unsafe |
| DeepInstinct | MALICIOUS |
| DrWeb | BackDoor.AsyncRATNET.1 |
| ESET-NOD32 | a variant of MSIL/AsyncRAT.A |
| Elastic | Windows.Generic.Threat |
| Emsisoft | Trojan.GenericKDZ.102657 (B) |
| F-Secure | Heuristic.HEUR/AGEN.1371145 |
| FireEye | Generic.mg.62d8e9e34d2caec1 |
| Fortinet | MSIL/Agent.CTE!tr |
| GData | MSIL.Trojan-Stealer.Keylogger.BA |
| Detected | |
| Gridinsoft | Trojan.Win32.AsyncRAT.dd!n |
| Ikarus | Backdoor.Agent |
| Jiangmin | Trojan.MSIL.aoink |
| K7AntiVirus | Trojan ( 700000121 ) |
| K7GW | Trojan ( 700000121 ) |
| Kaspersky | HEUR:Trojan.MSIL.Agent.gen |
| MAX | malware (ai score=82) |
| Malwarebytes | Generic.Malware.AI.DDS |
| MaxSecure | Trojan.Malware.300983.susgen |
| McAfee | GenericRXVS-NQ!62D8E9E34D2C |
| McAfeeD | Real Protect-LS!62D8E9E34D2C |
| MicroWorld-eScan | Trojan.GenericKDZ.102657 |
| Microsoft | Trojan:MSIL/AsyncRAT.S!MTB |
| Rising | Backdoor.AsyncRAT!1.C678 (CLASSIC) |
| SUPERAntiSpyware | Trojan.Agent/Gen-MSILZilla |
| Sangfor | Suspicious.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win32.Generic.lm |
| Sophos | Troj/VenomRat-A |
| Symantec | ML.Attribute.HighConfidence |
| Tencent | Trojan.MSIL.Agent.16000593 |
| Trapmine | malicious.moderate.ml.score |
| TrendMicro | Backdoor.MSIL.ASYNCRAT.SMYXDHV |
| VBA32 | TScope.Trojan.MSIL |
| VIPRE | Trojan.GenericKDZ.102657 |
| Varist | W32/Trojan.IML.gen!Eldorado |
| VirIT | Trojan.Win32.MSIL_Heur.B |
| Webroot | |
| Yandex | Trojan.Agent!vCtbbtdhizM |
| ZoneAlarm | HEUR:Trojan.MSIL.Agent.gen |
| alibabacloud | Backdoor[rat]:MSIL/Agenttesla.Stub.LQL!MTB |
| AVG | MSIL:AsyncRat-E [Pws] |
| Alibaba | Trojan:MSIL/AsyncRAT.87066974 |
| Avast | MSIL:AsyncRat-E [Pws] |
| CTX | exe.trojan.msil |
| CrowdStrike | win/malicious_confidence_100% (W) |
| K7AntiVirus | Trojan ( 700000201 ) |
| K7GW | Trojan ( 700000201 ) |
| Kingsoft | malware.kb.c.999 |
| Lionic | Trojan.Win32.AsyncRAT.4!c |
| MaxSecure | Trojan.Malware.8703358.susgen |
| NANO-Antivirus | Trojan.Win32.AsyncRAT.kpdqed |
| Paloalto | generic.ml |
| Panda | Trj/CI.A |
| Skyhigh | BehavesLike.Win32.Fareit.lm |
| Symantec | Backdoor.ASync |
| TrellixENS | GenericRXVS-NQ!62D8E9E34D2C |
| TrendMicro-HouseCall | Backdoor.MSIL.ASYNCRAT.SMYXDHV |
| Webroot | W32.Trojan.Gen |
| Xcitium | Malware@#2wu7fxgihkr07 |
| Zillya | Trojan.AsyncRAT.Win32.6072 |
| ZoneAlarm | Troj/VenomRat-A |
| alibabacloud | Rat:Win/AsyncRAT.Stub |
| huorong | Backdoor/MSIL.DcRat.a |