Madium-Executor.exe

Classification: Malicious

Madium-Executor.exe is a trojan (Windows 64-bit executable). Detected by 43 antivirus engines. 3 sightings, last seen 2026-06-15.

Detection summary

  • 43 antivirus detections
  • 1 IDS alerts
  • 0 processes observed
  • 1 contacted hosts
  • 1 DNS requests

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-06-15 09:45:05 2026-06-15 09:45:05 malicious-activity
Sheetrat Triage 2026-06-15 08:50:03 2026-06-15 08:56:54 malicious-activity

Tags

sheetrat bootkit costura defense_evasion discovery evasion execution exploit packer persistence ransomware trojan evasive windows-server-utility collection spyware stealer

Sample information

Filenames
Madium-Executor.exe, 098fde601ecec7610152300b0f2b5f4b5786405ffb117e6ca2129bf7151f5471.bin
File type
PE32+ executable for MS Windows 6.00 (GUI), x86-64 ...
MD5
2a40e59a97a448b1e262616005a5e5b9
SHA-1
f209c0e01f4bc619a027675fbce56352a19f089f
SHA-256
098fde601ecec7610152300b0f2b5f4b5786405ffb117e6ca2129bf7151f5471
First indexed
2026-06-15 08:50:03
Last updated
2026-09-16 00:43:12

Antivirus detections

EngineDetection
ALYacGeneric.Dacic.6230.0B080AD3
APEXMalicious
AVGWin32:R77Rootkit-E [Rtk]
AhnLab-V3Trojan/Win.MSILZilla.C5769516
Antiy-AVLTrojan[Backdoor]/MSIL.AsyncRAT
ArcabitGeneric.Dacic.6230.0B080AD3
AvastWin32:R77Rootkit-E [Rtk]
AviraRKIT/W32.R77Rootkit.E
BitDefenderGeneric.Dacic.6230.0B080AD3
BkavW32.Malware.57067375
CAT-QuickHealTrojan.YakbeexMSIL.ZZ4
CTXexe.unknown.dacic
ClamAVWin.Malware.Lazy-10008179-0
CrowdStrikewin/malicious_confidence_90% (D)
CylanceUnsafe
CynetMalicious (score: 99)
DeepInstinctMALICIOUS
DrWebTrojan.DownLoad4.16832
ESET-NOD32MSIL/Agent.EUY trojan
ElasticWindows.Rootkit.R77
EmsisoftGeneric.Dacic.6230.0B080AD3 (B)
F-SecureTrojan.RKIT/W32.R77Rootkit.E
FortinetMSIL/Agent.ESK!tr
GDataGeneric.Dacic.6230.0B080AD3
GoogleDetected
K7AntiVirusTrojan ( 005cde671 )
K7GWTrojan ( 005cde671 )
KasperskyUDS:DangerousObject.Multi.Generic
MalwarebytesMalware.AI.2472632852
McAfeeDti!098FDE601ECE
MicroWorld-eScanGeneric.Dacic.6230.0B080AD3
MicrosoftBackdoor:MSIL/AsyncRAT.KK!MTB
RisingBackdoor.njRAT/MSIL!1.12798 (CLASSIC)
SangforTrojan.Win32.Save.a
SentinelOneStatic AI - Malicious PE
SophosATK/R77rkit-F
TencentTrojan.Msil.Crysan.16001371
VBA32BScope.Trojan.Win64.Reflo
VIPREGeneric.Dacic.6230.0B080AD3
VaristW64/MSIL_AsyncRAT.B.gen!Eldorado
VirITTrojan.Win64.MSIL_Heur.A
ZoneAlarmATK/Rootkit-R77
huorongWorm/MSIL.Autorun.e

Network contacts

208.95.112.1

DNS requests

ip-api.com