ExeFile (69).exe
Classification: Malicious
ExeFile (69).exe is a malicious file sample. Linked to Dok malware. Reported by 2 threat sources, last seen 2026-03-18. Detected by 74 antivirus engines.
Detection summary
- 74 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: DOK (S0281)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Triage | 2026-03-18 01:00:04 | 2026-03-18 01:00:04 | malicious-activity | |
| Retefe | ThreatFox Abuse.ch | 2024-08-21 00:58:50 | 2024-08-23 00:22:01 | S0281 Dok |
Tags
win.retefe tsukuba werdlod discovery dropperSample information
- Filenames
- ExeFile (69).exe
- MD5
bbbd7535034d9bb440dd2b71c724b1e9- SHA-1
3cac48e520e29055e37e32823e8e8c1db8c7da4d- SHA-256
146fb98d6e239d844dee837aa55ff873d0599d2af7400a1b6fba74ee0eb5c7c3- SHA-512
f05c6f43182dcd9221dba3bed02214ada5092abbe6a725e8e6cdb092dd587e058c8f69ecd79d5bcc93ae631e9451d2b3a6b4f99f820763aa148c56fa40a32960- First indexed
- 2024-08-21 01:17:08
- Last updated
- 2026-05-11 06:57:22
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Gen:Variant.Jaik.52780 |
| APEX | Malicious |
| AVG | Win32:Evo-gen [Trj] |
| AhnLab-V3 | Trojan/Win32.Agent.R210910 |
| Alibaba | Trojan:JS/Retefe.cc05450f |
| Antiy-AVL | Trojan/Script.Agent |
| Arcabit | Trojan.Jaik.DCE2C |
| Avast | Win32:Evo-gen [Trj] |
| Avira | HEUR/AGEN.1316616 |
| BitDefender | Gen:Variant.Jaik.52780 |
| Bkav | W32.AIDetectMalware |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cybereason | malicious.5034d9 |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.MulDrop7.44903 |
| ESET-NOD32 | JS/Retefe.M |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Variant.Jaik.52780 (B) |
| F-Secure | Heuristic.HEUR/AGEN.1316616 |
| FireEye | Generic.mg.bbbd7535034d9bb4 |
| Fortinet | W32/Script.AGENT!tr |
| GData | Gen:Variant.Jaik.52780 |
| Detected | |
| Ikarus | Trojan.Retefe |
| Jiangmin | Trojan.Script.arrn |
| K7AntiVirus | Trojan ( 0050713b1 ) |
| K7GW | Trojan ( 0050713b1 ) |
| Kaspersky | HEUR:Trojan.Script.Agent.gen |
| Kingsoft | malware.kb.a.985 |
| Lionic | Trojan.Win32.Retefe.4!c |
| MAX | malware (ai score=100) |
| Malwarebytes | Malware.AI.4160396355 |
| McAfee | Generic!Emotet.c |
| McAfeeD | ti!146FB98D6E23 |
| MicroWorld-eScan | Gen:Variant.Jaik.52780 |
| Microsoft | Trojan:Win32/Dynamer!rfn |
| NANO-Antivirus | Trojan.Win32.Retefe.etwzps |
| Panda | Trj/CI.A |
| Rising | Trojan.MalCert!1.F6F3 (CLASSIC) |
| Sangfor | Trojan.Win32.Retefe.V1ay |
| Sophos | Mal/Generic-S |
| Symantec | ML.Attribute.HighConfidence |
| Tencent | Malware.Win32.Gencirc.114b3f0f |
| Trapmine | malicious.high.ml.score |
| TrendMicro | TROJ_GEN.R06EC0PHL24 |
| TrendMicro-HouseCall | TROJ_GEN.R06EC0PHL24 |
| VBA32 | Trojan.Script |
| VIPRE | Gen:Variant.Jaik.52780 |
| VirIT | Adware.Win32.Generic.PD |
| Webroot | W32.Trojan.Gen |
| Xcitium | Malware@#2n1t0mmqc0vlt |
| Yandex | Trojan.GenAsa!1tMNwXRaF9w |
| Zillya | Trojan.Agent.Win32.851480 |
| ZoneAlarm | UDS:DangerousObject.Multi.Generic |
| alibabacloud | Trojan:Javascript/Retefe.M |
| huorong | Trojan/JS.Retefe |
| Bkav | W32.Common.3D26ABD8 |
| CAT-QuickHeal | Trojan.Ghanarava.173123304924b1e9 |
| CTX | exe.trojan.retefe |
| Kaspersky | UDS:DangerousObject.Multi.Generic |
| Kingsoft | Script.Trojan.Agent.gen |
| Malwarebytes | Malware.AI.1625783824 |
| MaxSecure | Trojan.Malware.9502894.susgen |
| Sangfor | Trojan.Win32.Retefe.Vazx |
| SentinelOne | Static AI - Suspicious PE |
| Skyhigh | BehavesLike.Win32.Generic.fc |
| TrellixENS | Generic!Emotet.c |
| TrendMicro-HouseCall | Trojan.Win32.VSX.PE04C9h |
| Varist | W32/ABTrojan.OYJX-6100 |
| ViRobot | Trojan.Win32.Z.Agent.308388 |
| ZoneAlarm | Troj/Agent-AXJX |
| huorong | Trojan/JS.Agent.eo |