2026-02-04_a20adf16e538f251a6a6e5bfdae4f4ba_agent-tesla_amadey_cloudeye_cobalt-strike_coinminer_darkgate_elex_hellokitty_hijackloader_icedid_luca-stealer_manuscrypt_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop_vidar_xloader
Classification: Malicious
2026-02-04_a20adf16e538f251a6a6e5bfdae4f4ba_agent-tesla_amadey_cloudeye_cobalt-strike_coinminer_darkgate_elex_hellokitty_hijackloader_icedid_luca-stealer_man…
Detection summary
- 48 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Generic Malware |
Triage |
2026-02-05 00:09:48 |
2026-02-05 00:09:48 |
malicious-activity
|
|
Tags
adware
discovery
persistence
spyware
stealer
Sample information
- Filenames
- 2026-02-04_a20adf16e538f251a6a6e5bfdae4f4ba_agent-tesla_amadey_cloudeye_cobalt-strike_coinminer_darkgate_elex_hellokitty_hijackloader_icedid_luca-stealer_manuscrypt_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop_vidar_xloader
- MD5
a20adf16e538f251a6a6e5bfdae4f4ba- SHA-1
6404eaf6bae6b3bb621d90b01d8f8d1cff6a4e34- SHA-256
10e6b928c93fdb1b588e3193306fb719a6a5f053d57e0cd0443b16c5a5a579e3- SHA-512
e20a53a6f2180b5d345c5fa161aaa50a67c83b79c6a54cdcae409196f04a13d40a6dd24761b581d45616d762cacd6d76d0438b5e7afac7d77cfeb9c64980989c- First indexed
- 2026-02-05 00:09:48
- Last updated
- 2026-09-03 00:22:26
Antivirus detections
| Engine | Detection |
|---|
| ALYac | Trojan.GenericKD.78085827 |
| APEX | Malicious |
| AVG | Win32:Malware-gen |
| AhnLab-V3 | Malware/Win32.RL_Generic.R296972 |
| Arcabit | Trojan.Generic.D4A77EC3 |
| Avast | Win32:Malware-gen |
| Avira | TR/Dropper.Gen |
| BitDefender | Trojan.GenericKD.78085827 |
| CTX | exe.trojan.autoit |
| ClamAV | Win.Malware.Razy-6988968-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Win32.Kiemthe.1 |
| ESET-NOD32 | Win32/Packed.Autoit.H suspicious application |
| Elastic | malicious (high confidence) |
| Emsisoft | Trojan.GenericKD.78085827 (B) |
| F-Secure | Trojan.TR/Dropper.Gen |
| Fortinet | W32/AutoitInject.PS!tr |
| GData | Trojan.GenericKD.78085827 |
| Google | Detected |
| Gridinsoft | Trojan.Win32.Packed.sa |
| Ikarus | Trojan.Dropper |
| K7AntiVirus | Trojan ( 700000111 ) |
| K7GW | Trojan ( 700000111 ) |
| Kaspersky | HEUR:Trojan.Script.Generic |
| Kingsoft | malware.kb.a.997 |
| Lionic | Trojan.Win32.Autoit.4!c |
| Malwarebytes | Neshta.Virus.FileInfector.DDS |
| MaxSecure | Trojan.Autoit.AZA |
| McAfeeD | Trojan:Win/SuspiciousAutoit.A |
| MicroWorld-eScan | Trojan.GenericKD.78085827 |
| Microsoft | Trojan:Win32/AutoitInject.PS!MTB |
| Paloalto | generic.ml |
| Sangfor | Suspicious.Win32.Save.ins |
| Sophos | Mal/Generic-S |
| Tencent | Script.Trojan.Generic.Gjgl |
| Trapmine | malicious.high.ml.score |
| TrellixENS | Artemis!A20ADF16E538 |
| TrendMicro | TROJ_GEN.R002C0DB426 |
| VBA32 | Trojan.Autoit.F |
| VIPRE | Trojan.GenericKD.78085827 |
| Varist | W32/MSIL_Agent.EK.gen!Eldorado |
| Webroot | W32.Trojan.Gen |
| Xcitium | Worm.Win32.P2P-Worm.Palevo.fghk@4w2owj |
| Zillya | Trojan.Generic.Script.20 |
| alibabacloud | Trojan:Win/AutoitInject.PB8PHU |