16e880fa69243f43c404118897fbc99fca5dc6cb403165b3e305907928aa8c90
Classification: Malicious
16e880fa69243f43c404118897fbc99fca5dc6cb403165b3e305907928aa8c90 is a trojan (application/x-dosexec). Detected by 48 antivirus engines.
Detection summary
- 48 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Intrusion sets: TURLA (G0010)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Snake | ThreatFox Abuse.ch | 2025-02-20 09:39:21 | 2025-02-22 09:33:09 | G0010 Turla | |
| SnakeKeylogger | Abuse.ch | 2021-11-28 07:31:52 | 2021-11-28 07:31:52 | malicious-activity |
Tags
win.snake ekans snakehoseSample information
- Filenames
- 040a3d53daba1ccab511032ac29845f3.exe
- File type
- application/x-dosexec
- MD5
040a3d53daba1ccab511032ac29845f3- SHA-1
e8f23c091430024cab4cdd8450abb7961c053624- SHA-256
16e880fa69243f43c404118897fbc99fca5dc6cb403165b3e305907928aa8c90- First indexed
- 2021-11-28 08:15:09
- Last updated
- 2026-09-11 02:25:17
Antivirus detections
| Engine | Detection |
|---|---|
| Elastic | malicious (high confidence) |
| MicroWorld-eScan | Trojan.GenericKDZ.80629 |
| FireEye | Trojan.GenericKDZ.80629 |
| Cylance | Unsafe |
| K7AntiVirus | Trojan-Downloader ( 0058a4eb1 ) |
| K7GW | Trojan-Downloader ( 0058a4eb1 ) |
| Cyren | W32/MSIL_Kryptik.CKI.gen!Eldorado |
| Symantec | ML.Attribute.HighConfidence |
| ESET-NOD32 | a variant of MSIL/TrojanDownloader.Agent.JKP |
| APEX | Malicious |
| Kaspersky | HEUR:Trojan-PSW.MSIL.Stealer.gen |
| BitDefender | Trojan.GenericKDZ.80629 |
| Ad-Aware | Trojan.GenericKDZ.80629 |
| Emsisoft | Trojan.GenericKDZ.80629 (B) |
| DrWeb | Trojan.PWS.Steam.21709 |
| GData | Trojan.GenericKDZ.80629 |
| Arcabit | Trojan.Generic.D13AF5 |
| Microsoft | Trojan:Win32/Woreflint.A!cl |
| BitDefenderTheta | Gen:NN.ZemsilF.34294.cm1@aGCYxTai |
| ALYac | Trojan.GenericKDZ.80629 |
| MAX | malware (ai score=88) |
| VBA32 | TScope.Trojan.MSIL |
| Malwarebytes | Trojan.Downloader.MSIL.Generic |
| SentinelOne | Static AI - Malicious PE |
| Fortinet | MSIL/Agent.JKP!tr.dldr |
| CrowdStrike | win/malicious_confidence_80% (W) |
| Lionic | Trojan.MSIL.Stealer.i!c |
| ALYac | Trojan.Keylogger.Snake |
| Alibaba | TrojanPSW:MSIL/Stealer.61a5f58b |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Avast | Win32:CrypterX-gen [Trj] |
| Tencent | Msil.Trojan-downloader.Agent.Bnu |
| TrendMicro | TROJ_GEN.R002C0WKQ21 |
| McAfee-GW-Edition | Artemis!Trojan |
| SentinelOne | Static AI - Suspicious PE |
| Avira | TR/Dldr.Agent.vmscg |
| MAX | malware (ai score=100) |
| Kingsoft | Win32.PSWTroj.Undef.(kcloud) |
| Gridinsoft | Trojan.Win32.Downloader.sa |
| Microsoft | Trojan:MSIL/SpySnake.MF!MTB |
| Cynet | Malicious (score: 99) |
| AhnLab-V3 | Trojan/Win.Generic.C4794693 |
| McAfee | RDN/Generic PWS.y |
| TrendMicro-HouseCall | TROJ_GEN.R002C0WKQ21 |
| Yandex | Trojan.DL.Agent!lOY49okuEeo |
| Ikarus | Trojan-Downloader.MSIL.Discord |
| BitDefenderTheta | Gen:NN.ZemsilF.34062.cm1@aGCYxTai |
| AVG | Win32:CrypterX-gen [Trj] |