4BC1.exe
Classification: Malicious
4BC1.exe is a trojan (Windows executable). Detected by 65 antivirus engines. Linked to Wiper malware. 2 sightings from VM-Ray, last seen 2023-11-10.
Detection summary
- 65 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: WIPER (S0041)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Ransomware | VM-Ray | 2023-11-10 14:25:47 | 2023-11-10 14:25:47 | ||
| Wiper | VM-Ray | 2023-11-10 14:25:47 | 2023-11-10 14:25:47 | S0041 Wiper |
Sample information
- Filenames
- 4BC1.exe
- File type
- PE32 executable (GUI) Intel 80386, for MS Windows
- SHA-256
1159149e3d2887c96ca186d292aa0ca0930b9d57e73f2bb7f05b4b766ae43b4a- First indexed
- 2023-11-10 12:42:51
- Last updated
- 2026-08-26 02:27:41
Antivirus detections
| Engine | Detection |
|---|---|
| Bkav | W32.AIDetectMalware |
| tehtris | Generic.Malware |
| MicroWorld-eScan | Gen:Variant.Barys.445044 |
| FireEye | Generic.mg.08167aa8f99b0a28 |
| Skyhigh | BehavesLike.Win32.Generic.vc |
| ALYac | Gen:Variant.Barys.445044 |
| Malwarebytes | Trojan.Packed |
| VIPRE | Gen:Variant.Barys.445044 |
| Sangfor | Trojan.Win32.Save.a |
| BitDefender | Gen:Variant.Barys.445044 |
| Cybereason | malicious.194298 |
| BitDefenderTheta | Gen:NN.ZexaF.36792.@NW@auYW@2h |
| Symantec | ML.Attribute.HighConfidence |
| Elastic | malicious (high confidence) |
| ESET-NOD32 | a variant of Win32/Packed.VMProtect.AU suspicious |
| Cynet | Malicious (score: 100) |
| APEX | Malicious |
| Rising | Ransom.LockBit!8.114C8 (TFE:5:g4rxUjBETNG) |
| Emsisoft | Gen:Variant.Barys.445044 (B) |
| Trapmine | malicious.high.ml.score |
| Sophos | Generic ML PUA (PUA) |
| Microsoft | Ransom:Win32/Lockbit.HA!MTB |
| Arcabit | Trojan.Barys.D6CA74 |
| GData | Gen:Variant.Barys.445044 |
| AhnLab-V3 | Trojan/Win.Lockbit.C5329955 |
| McAfee | Artemis!08167AA8F99B |
| MAX | malware (ai score=84) |
| DeepInstinct | MALICIOUS |
| VBA32 | BScope.TrojanPSW.Coins |
| Cylance | unsafe |
| SentinelOne | Static AI - Malicious PE |
| AVG | Win32:Evo-gen [Trj] |
| Avast | Win32:Evo-gen [Trj] |
| CrowdStrike | win/malicious_confidence_70% (D) |
| ALYac | Trojan.GenericKD.71741615 |
| Alibaba | Ransom:Win32/Lockbit.78f99e84 |
| Antiy-AVL | Trojan[Packed]/Win32.VMProtect |
| Arcabit | Trojan.Generic.D446B0AF |
| Avira | TR/Redcap.xygzl |
| BitDefender | Trojan.GenericKD.71741615 |
| BitDefenderTheta | Gen:NN.ZexaF.36802.@NW@auYW@2h |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cybereason | malicious.8f99b0 |
| DrWeb | Trojan.Encoder.38273 |
| Emsisoft | Trojan.GenericKD.71741615 (B) |
| F-Secure | Trojan.TR/Redcap.xygzl |
| Fortinet | Riskware/Trojan_Win32_SMOKELOADER |
| GData | Trojan.GenericKD.71741615 |
| Detected | |
| K7AntiVirus | Trojan ( 0059f3ce1 ) |
| K7GW | Trojan ( 0059f3ce1 ) |
| Kaspersky | Trojan-Ransom.Win32.Lockbit.aem |
| Lionic | Trojan.Win32.Lockbit.j!c |
| MaxSecure | Trojan.Malware.220352978.susgen |
| MicroWorld-eScan | Trojan.GenericKD.71741615 |
| Panda | Trj/RansomGen.A |
| Sophos | Mal/Generic-S |
| Tencent | Malware.Win32.Gencirc.10bf4a65 |
| TrendMicro | Trojan.Win32.SMOKELOADER.YXDKJZ |
| TrendMicro-HouseCall | Trojan.Win32.SMOKELOADER.YXDKJZ |
| VIPRE | Trojan.GenericKD.71741615 |
| Varist | W32/ABRisk.SSMU-6387 |
| Yandex | Trojan.Lockbit!Q3mAKQK2tb4 |
| Zillya | Trojan.Lockbit.Win32.35 |
| ZoneAlarm | Trojan-Ransom.Win32.Lockbit.aem |