S Ü D B U N D RECHNUNG_patched.exe$

Classification: Malicious

S Ü D B U N D RECHNUNG_patched.exe$ is a malicious file sample. Reported by 1 threat source, last seen 2023-10-12. Detected by 10 antivirus engines.

Detection summary

  • 10 antivirus detections
  • 0 IDS alerts
  • 2 processes observed
  • 2 contacted hosts
  • 2 DNS requests

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2023-10-12 07:15:04 2023-10-12 07:15:04

Tags

windows-server-utility

Sample information

Filenames
S Ü D B U N D RECHNUNG_patched.exe$
File type
PE32+ executable (GUI) x86-64, for MS Windows
Size
6762888 bytes
MD5
5215ba23e6c2f65103eb898c3b3ba6a2
SHA-1
c2ed462ff133a2446bade866b3fb659105e1957f
SHA-256
162b0caec3be489ebcb40eb7d47de23d32ef9f8a553ae2ee7a662e6f2eb0655f
First indexed
2023-10-12 06:45:23
Last updated
2026-09-03 00:26:11

Antivirus detections

EngineDetection
AVGWin64:Malware-gen
Antiy-AVLTrojan/Win32.Penguish
AvastWin64:Malware-gen
BkavW64.AIDetectMalware
ESET-NOD32Win64/TrojanDownloader.Rugmi.C
GoogleDetected
GridinsoftTrojan.Win64.Gen.se!i
IkarusTrojan-Spy.Agent
MalwarebytesTrojan.Downloader.stgPNG.Generic
MicrosoftProgram:Win32/Wacapew.C!ml

Network contacts

151.101.2.132 104.21.51.194

DNS requests

apache.org gcdnbabl3png.erikroff.fun

Process list

NameCommand line
S_DBUNDRECHNUNG_patched.exe
netsh.exe