bro.exe
Classification: Malicious
bro.exe is a malicious file sample (Windows executable). Linked to Turla activity. 3 sightings from VM-Ray and ThreatFox Abuse.ch, last seen 2025-02-22.
Detection summary
- 0 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Intrusion sets: TURLA (G0010)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Snake | ThreatFox Abuse.ch | 2025-02-20 09:38:51 | 2025-02-22 09:35:48 | G0010 Turla | |
| Spyware | VM-Ray | 2022-10-03 20:21:19 | 2022-10-03 20:21:19 | ||
| Keylogger | VM-Ray | 2022-10-03 20:21:19 | 2022-10-03 20:21:19 |
Tags
win.snake ekans snakehoseSample information
- Filenames
- bro.exe
- File type
- PE32 executable (GUI) Intel 80386, for MS Windows
- SHA-256
128ca3108208f8e6ecc293820f9fbfbe481b00a1c3316389a2e9eaf7da74ef46- First indexed
- 2022-10-03 19:40:58
- Last updated
- 2026-09-23 02:21:15