19ced3f729d628d8b5b44c4f5c508349ece2cf5a730ea8ea893f931b5325b336
Classification: Malicious
19ced3f729d628d8b5b44c4f5c508349ece2cf5a730ea8ea893f931b5325b336 is a trojan. Detected by 55 antivirus engines. Linked to Turla activity.
Detection summary
- 55 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Intrusion sets: TURLA (G0010)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Snake | ThreatFox Abuse.ch | 2025-02-20 09:39:40 | 2025-02-22 09:31:21 | G0010 Turla |
Tags
win.snake ekans snakehoseSample information
- SHA-256
19ced3f729d628d8b5b44c4f5c508349ece2cf5a730ea8ea893f931b5325b336- First indexed
- 2025-02-20 10:23:40
- Last updated
- 2026-09-22 23:13:06
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.Agent.GNIO |
| APEX | Malicious |
| AVG | Script:SNH-gen [Trj] |
| AhnLab-V3 | Packed/Win.Suspicious.C5690832 |
| Arcabit | Trojan.Agent.GNIO |
| Avast | Script:SNH-gen [Trj] |
| Avira | TR/AD.SnakeStealer.kofsl |
| BitDefender | Trojan.Agent.GNIO |
| Bkav | W32.AIDetectMalware |
| CAT-QuickHeal | Trojan.Ghanarava.17393529443d7382 |
| CTX | exe.trojan.autoit |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.AutoIt.1503 |
| ESET-NOD32 | MSIL/Spy.Agent.AES |
| Elastic | malicious (high confidence) |
| Emsisoft | Trojan.Agent.GNIO (B) |
| F-Secure | Trojan.TR/AD.SnakeStealer.kofsl |
| FireEye | Trojan.Agent.GNIO |
| Fortinet | AutoIt/Agent.OM!tr |
| GData | Trojan.Agent.GNIO |
| Detected | |
| Ikarus | Trojan.Autoit |
| K7AntiVirus | Trojan ( 700000111 ) |
| K7GW | Trojan ( 700000111 ) |
| Kaspersky | Trojan.Win32.Strab.qnx |
| Kingsoft | Win32.Trojan.Obfus.gen |
| Lionic | Trojan.Win32.Autoit.4!c |
| Malwarebytes | Trojan.Injector.AutoIt |
| MaxSecure | Trojan.Malware.300983.susgen |
| McAfee | Artemis!43723B5F3929 |
| McAfeeD | ti!19CED3F729D6 |
| MicroWorld-eScan | Trojan.Agent.GNIO |
| Microsoft | Trojan:Win32/AutoitInject!MTB |
| NANO-Antivirus | Trojan.Win32.AutoIt.ksqxwl |
| Paloalto | generic.ml |
| Panda | Trj/Autoit.EJ |
| Sangfor | Trojan.Win32.Autoit.Vinn |
| Skyhigh | BehavesLike.Win32.Formbook.tc |
| Sophos | Troj/AutoIt-DHB |
| Symantec | Trojan.Gen.2 |
| Tencent | Win32.Trojan.Strab.Pjgl |
| TrendMicro | Cryp_Embed4 |
| TrendMicro-HouseCall | TROJ_GEN.F0D1C00J924 |
| VBA32 | Trojan.Autoit.Crinje |
| VIPRE | Trojan.Agent.GNIO |
| Varist | W32/Autoit.XXWI-5918 |
| ViRobot | Trojan.Win.Z.Autoit.1106691 |
| VirIT | Trojan.Win32.AutoIt_Heur.L |
| Xcitium | Malware@#32c9j6jodqx3g |
| Yandex | Trojan.Igent.b29dBc.1 |
| Zillya | Trojan.Agent.Win32.4032350 |
| huorong | Trojan/AutoIT.Injector.ch |