18b0a373fee639afec0052399177599f32f4b70bcfecc5ae0a34d82e400310a1

Classification: Malicious

18b0a373fee639afec0052399177599f32f4b70bcfecc5ae0a34d82e400310a1 is a malicious file sample (Windows executable). Linked to Frp malware.

Detection summary

  • 0 antivirus detections
  • 21 IDS alerts
  • 0 processes observed
  • 32 contacted hosts
  • 32 DNS requests

MITRE ATT&CK associations

Malware families: FRP (S1144)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Cyber Threat Alliance 2026-08-13 10:14:15 2026-08-26 10:20:33 malicious-activity
Generic Malware Hybrid-Analysis 2026-01-20 17:46:52 2026-01-20 19:00:12
frp MalwareBazaar Abuse.ch 2026-01-20 17:36:23 2026-01-20 17:36:23 malicious-activity S1144 FRP

Tags

malicious suspicious

Sample information

Filenames
file, 18b0a373fee639afec0052399177599f32f4b70bcfecc5ae0a34d82e400310a1.bin
File type
PE32 executable for MS Windows 5.00 (GUI), Intel i ...
MD5
be24fe7d9f5b3cbb3cd3980b0320460c
SHA-1
78bc32990a42124d712a0688285b4bbad0194959
SHA-256
18b0a373fee639afec0052399177599f32f4b70bcfecc5ae0a34d82e400310a1
First indexed
2026-01-20 17:36:23
Last updated
2026-07-30 21:44:39

Network contacts

94.100.180.31 104.16.184.241 178.16.54.109 212.227.17.8 108.177.11.27 212.227.15.9 194.25.134.9 200.219.222.123 200.147.41.201 52.101.41.183 38.248.7.40 81.19.78.69 80.12.26.32 52.101.41.58 212.77.101.13 74.208.5.20 52.101.68.33 194.97.208.39 52.101.10.10 213.205.33.63 67.195.228.110 108.177.11.26 74.6.144.41 98.89.99.138 188.125.72.74 80.12.24.83 195.201.18.63 98.136.96.75 77.88.21.249 65.181.116.138 194.158.98.50 212.27.48.6

DNS requests

0.ru 01hosting.biz 126.com 126mx01.mxmail.netease.com 163.com 163.net 163mx.cdn.163.net 163mx03.mxmail.netease.com 21cn.com 357spaclub.com SMTP.GOOGLE.com a2cosmeticos.com absamail.co.za abv.bg academia-usbbog-edu-co.mail.protection.outlook.com academia.usbbog.edu.co ace.odn.ne.jp acquest-solutions.com admin.com agenciastarfive.com.co aihualiu.com airecaribe-com.mail.protection.outlook.com airecaribe.com airjordanoutlethomes.us alfej-com.mail.protection.outlook.com alfej.com allianz.com alt.mailsac.com alt1.aspmx.l.google.com alt2.aspmx.l.google.com alt3.aspmx.l.google.com alt4.aspmx.l.google.com