152ef5fcd0278e127c3df415018857f3aed0a748160032356786815ccbe870d5

Classification: Malicious

152ef5fcd0278e127c3df415018857f3aed0a748160032356786815ccbe870d5 is a trojan (application/x-dosexec). Detected by 80 antivirus engines.

Detection summary

  • 80 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: SANDWORM TEAM (G0034) EARTH LUSCA (G1006)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Electrum Maltiverse 2023-03-02 04:15:22 2023-03-03 14:34:12 malicious-activity G0034 Sandworm Team
Earth Lusca Maltiverse 2023-03-02 04:15:22 2023-03-03 14:34:09 malicious-activity G1006 Earth Lusca
TitanStealer MalwareBazaar Abuse.ch 2022-12-25 13:52:56 2022-12-25 13:52:56 malicious-activity

Tags

apt

Sample information

Filenames
1af2037acbabfe804a522a5c4dd5a4ce.exe
File type
application/x-dosexec
MD5
1af2037acbabfe804a522a5c4dd5a4ce
SHA-1
119f5b7da9e57bad8b618c660d21a91d06d1795c
SHA-256
152ef5fcd0278e127c3df415018857f3aed0a748160032356786815ccbe870d5
First indexed
2022-12-27 12:19:21
Last updated
2026-10-07 01:53:47

Antivirus detections

EngineDetection
LionicTrojan.Win32.Coins.tse2
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.63377737
ALYacTrojan.Stealer.Titan
CylanceUnsafe
SangforInfostealer.Win32.Coins.V2tm
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/runner.ali1000123
K7GWTrojan ( 0059a53d1 )
K7AntiVirusTrojan ( 0059a53d1 )
CyrenW32/ABRisk.KOLM-8081
SymantecInfostealer
ESET-NOD32a variant of Win32/Kryptik.HRKB
APEXMalicious
Paloaltogeneric.ml
CynetMalicious (score: 99)
KasperskyTrojan-PSW.Win32.Coins.advp
BitDefenderTrojan.GenericKD.63377737
NANO-AntivirusTrojan.Win32.Inject.jtihbz
TencentWin32.Trojan-QQPass.QQRob.Ljgl
EmsisoftTrojan.GenericKD.63377737 (B)
F-SecureTrojan.TR/AD.Inject.gnkcs
DrWebTrojan.DownLoader45.31326
VIPRETrojan.GenericKD.63377737
TrendMicroTROJ_GEN.R002C0DK322
McAfee-GW-EditionBehavesLike.Win32.Generic.vc
Trapminesuspicious.low.ml.score
FireEyeTrojan.GenericKD.63377737
SophosMal/Generic-S
JiangminTrojan.PSW.Coins.jvt
WebrootW32.Trojan.GenKD
AviraTR/AD.Inject.gnkcs
Antiy-AVLTrojan/Win32.Kryptik
KingsoftWin32.PSWTroj.Undef.(kcloud)
MicrosoftTrojan:Win32/Redline.RE!MTB
XcitiumMalware@#nbotf81ssa5
ArcabitTrojan.Generic.D3C71149
ViRobotTrojan.Win32.S.Agent.2947359
ZoneAlarmTrojan-PSW.Win32.Coins.advp
GDataTrojan.GenericKD.63377737
GoogleDetected
AhnLab-V3Trojan/Win.RedLine.C5290298
McAfeeArtemis!1AF2037ACBAB
MAXmalware (ai score=85)
VBA32BScope.TrojanPSW.Arkei
MalwarebytesTrojan.Vidar
PandaTrj/CI.A
TrendMicro-HouseCallTROJ_GEN.R002C0DK322
RisingStealer.Coins!8.133E9 (CLOUD)
YandexTrojan.Kryptik!7LkSxhntt4g
IkarusTrojan.Win32.Crypt
MaxSecureTrojan.Malware.73640957.susgen
FortinetW32/DotNetPacker.I!tr
BitDefenderThetaGen:NN.ZexaE.36276.Z!ZaaC9zBqg
AVGWin32:PWSX-gen [Trj]
AvastWin32:PWSX-gen [Trj]
AlibabaTrojanPSW:Win32/Coins.c9611fb0
ArcabitTrojan.Fragtor.D26CC6
AviraHEUR/AGEN.1314579
BitDefenderGen:Variant.Fragtor.158918
BkavW32.AIDetectMalware
CAT-QuickHealTrojan.Ghanarava.1675278502d5a4ce
CTXexe.trojan.coins
DeepInstinctMALICIOUS
ESET-NOD32Win32/Kryptik.HRKB trojan
EmsisoftGen:Variant.Fragtor.158918 (B)
F-SecureHeuristic.HEUR/AGEN.1314579
GDataGen:Variant.Fragtor.158918
K7AntiVirusPassword-Stealer ( 005d528a1 )
K7GWPassword-Stealer ( 005d528a1 )
KingsoftWin32.PSWTroj.Undef.a
LionicTrojan.Win32.Coins.i!c
MalwarebytesGeneric.Crypt.Trojan.DDS
McAfeeDti!152EF5FCD027
MicroWorld-eScanGen:Variant.Fragtor.158918
MicrosoftTrojan:Win32/Phoenix.RPY!MTB
TencentMalware.Win32.Gencirc.13bc52cc
TrendMicro-HouseCallTrojan.Win32.VSX.PE04C9t
VIPREGen:Variant.Fragtor.158918
alibabacloudTrojan[stealer]:Win/Phoenix.RXT2XJC