0a75a0bbbc1777737d0bb6238edf04a083fbad2ee87e3850daf6ad9b4e3234e7
Classification: Malicious
0a75a0bbbc1777737d0bb6238edf04a083fbad2ee87e3850daf6ad9b4e3234e7 is a downloader (application/x-dosexec). Detected by 16 antivirus engines.
Detection summary
- 16 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: REDLINE STEALER (S1240)
Intrusion sets: TURLA (G0010)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Snake | ThreatFox Abuse.ch | 2025-02-20 09:37:59 | 2025-02-22 09:40:42 | G0010 Turla | |
| Generic.Malware | Abuse.ch | 2021-10-02 06:29:01 | 2021-10-02 06:29:01 | malicious-activity | |
| RedLineStealer | Abuse.ch | 2021-10-02 06:29:01 | 2021-10-02 06:29:01 | malicious-activity | S1240 RedLine Stealer |
Tags
win.snake ekans snakehoseSample information
- Filenames
- 0f949e601f3c97fb3ad927c128fd3654.exe
- File type
- application/x-dosexec
- MD5
0f949e601f3c97fb3ad927c128fd3654- SHA-1
e21778398ece199e2de364afa88862a24c727cfe- SHA-256
0a75a0bbbc1777737d0bb6238edf04a083fbad2ee87e3850daf6ad9b4e3234e7- First indexed
- 2021-10-02 07:15:08
- Last updated
- 2026-09-11 05:18:42
Antivirus detections
| Engine | Detection |
|---|---|
| Elastic | malicious (high confidence) |
| FireEye | Generic.mg.0f949e601f3c97fb |
| Alibaba | Trojan:MSIL/Kryptik.ce6c49ea |
| BitDefenderTheta | Gen:NN.ZemsilF.34170.am0@aaI@4Dh |
| Cyren | W32/MSIL_Kryptik.EHH.gen!Eldorado |
| ESET-NOD32 | a variant of MSIL/TrojanDownloader.Tiny.BEI |
| APEX | Malicious |
| Kaspersky | UDS:Trojan-PSW.MSIL.Stealer.gen |
| Avast | FileRepMalware |
| Ikarus | Trojan-Downloader.MSIL.Tiny |
| Microsoft | Trojan:Win32/Sabsik.FL.B!ml |
| Cynet | Malicious (score: 100) |
| Malwarebytes | Trojan.Downloader.MSIL.Generic |
| SentinelOne | Static AI - Malicious PE |
| eGambit | Unsafe.AI_Score_95% |
| AVG | FileRepMalware |