1bc44eef75779e3ca1eefb8ff5a64807dbc942b1e4a2672d77b9f6928d292591

Classification: Malicious

1bc44eef75779e3ca1eefb8ff5a64807dbc942b1e4a2672d77b9f6928d292591 is a trojan (application/x-dosexec, 114.3 KB). Linked to Hermeticwiper malware.

Detection summary

  • 93 antivirus detections (77% detection ratio)
  • 0 IDS alerts
  • 2 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: HERMETICWIPER (S0697)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Cyber Threat Alliance 2026-08-10 10:20:01 2026-10-09 10:18:37 malicious-activity
Killdisk Cyber Threat Alliance 2026-10-07 15:45:44 2026-10-07 15:45:44 malicious-activity
Hermeticwiper Triage 2026-03-26 13:23:50 2026-10-03 20:36:19 malicious-activity S0697 HermeticWiper
Generic Malware Hybrid-Analysis 2023-04-06 17:45:04 2024-07-23 19:00:09
HermeticWiper MalwareBazaar Abuse.ch 2022-02-23 21:20:14 2022-02-23 21:20:14 malicious-activity S0697 HermeticWiper
Generic.Malware MalwareBazaar Abuse.ch 2022-02-23 21:20:14 2022-02-23 21:20:14 malicious-activity

Tags

apt backdoor banker botnet emotet infostealer mirai njrat petya qakbot ransomware rat shamoon spam spyware trojan hermeticwiper discovery wiper revoked_codesign

Sample information

Filenames
1bc44eef75779e3ca1eefb8ff5a64807dbc942b1e4a2672d77b9f6928d292591, 1bc44eef75779e3ca1eefb8ff5a64807dbc942b1e4a2672d77b9f6928d292591.exe, 61b25d11392172e587d8da3045812a66c3385451.malware
File type
application/x-dosexec
Size
117000 bytes
MD5
3f4a16b29f2f0532b7ce3e7656799125
SHA-1
61b25d11392172e587d8da3045812a66c3385451
SHA-256
1bc44eef75779e3ca1eefb8ff5a64807dbc942b1e4a2672d77b9f6928d292591
First indexed
2022-02-23 23:15:07
Last updated
2026-10-03 20:55:56

Antivirus detections

EngineDetection
LionicTrojan.Win32.HermeticWiper.4!c
ElasticWindows.Wiper.HermeticWiper
CynetMalicious (score: 100)
CAT-QuickHealTrojan.HrmetcWipr.S26876287
ALYacTrojan.Agent.Wiper
ZillyaDropper.HermeticWiper.Win32.2
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/HermeticWiper.a
K7GWTrojan ( 0058ec201 )
K7AntiVirusTrojan ( 0058ec201 )
VirITTrojan.Win32.HermeticWiper.A
CyrenW32/Agent.OSPU-6752
SymantecTrojan.KillDisk
ESET-NOD32a variant of Win32/KillDisk.NCV
AvastWin32:DangerousSig [Trj]
ClamAVWin.Malware.HermeticWiper-9940039-0
KasperskyTrojan.Win32.HermeticWiper.a
BitDefenderTrojan.GenericKD.50321312
NANO-AntivirusTrojan.Win32.HermeticWiper.jmyeyd
ViRobotTrojan.Win32.S.Agent.117000
MicroWorld-eScanTrojan.GenericKD.50321312
RisingTrojan.HermeticWiper!1.DC1D (CLASSIC)
SophosMal/KillDisk-A
DrWebTrojan.KillDisk.14086
VIPRETrojan.GenericKD.50321312
TrendMicroTrojan.Win32.KILLDISK.YECBW
McAfee-GW-EditionBehavesLike.Win32.HWipr.ch
FireEyeTrojan.GenericKD.50321312
EmsisoftMalCert-S.OE (A)
Paloaltogeneric.ml
JiangminTrojan.Agent.dvmb
WebrootW32.Trojan.Hermeticwiper
AviraHEUR/AGEN.1250515
MAXmalware (ai score=100)
Antiy-AVLTrojan/Win32.HermeticWiper.a
MicrosoftTrojan:Win32/FoxBlade.A!dha
XcitiumMalware@#15vrwm03tj1yd
ArcabitTrojan.Generic.D2FFD7A0
ZoneAlarmTrojan.Win32.HermeticWiper.a
GDataWin32.Malware.HermeticWiper.B
GoogleDetected
AhnLab-V3Trojan/Win.Hermeticwiper.R474255
McAfeeGeneric .jt
TACHYONTrojan/W32.HermeticWiper.117000
VBA32Trojan.Agent
Cylanceunsafe
TrendMicro-HouseCallTrojan.Win32.KILLDISK.YECBW
TencentMalware.Win32.Gencirc.10bb7558
YandexTrojan.HermeticWiper!USMDnjVpGIQ
MaxSecureTrojan.Malware.153603838.susgen
FortinetW32/KillDisk.NCV!tr
AVGWin32:DangerousSig [Trj]
PandaTrj/Genetic.gen
McAfeeArtemis!3F4A16B29F2F
SymantecTrojan Horse
KasperskyUDS:Trojan.Win32.Agent2.a
WebrootW32.Trojan.Wiper
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftDoS:Win32/FoxBlade.A!dha
RisingTrojan.KillDisk!8.C4C (CLOUD)
McAfee-GW-EditionArtemis!Trojan
Antiy-AVLTrojan/Win32.Unit8200
ArcabitTrojan.HermeticWiper.A
AviraTR/HermeticWiper.AM
BitDefenderTrojan.HermeticWiper.A
BkavW32.AIDetectMalware
CTXexe.trojan.killdisk
CylanceUnsafe
CynetMalicious (score: 99)
DeepInstinctMALICIOUS
F-SecureTrojan.TR/HermeticWiper.A
FireEyeTrojan.HermeticWiper.A
GridinsoftTrojan.Win32.Agent.oa!s1
IkarusTrojan.Win32.KillDisk
KingsoftWin32.Trojan.Agent2.a
LionicTrojan.Win32.HermeticWiper.tsyQ
MalwarebytesMalware.AI.2310642081
MaxSecureTrojan.Malware.140787675.susgen
McAfeeDti!1BC44EEF7577
MicroWorld-eScanTrojan.HermeticWiper.A
SkyhighBehavesLike.Win32.HWipr.ch
VIPRETrojan.HermeticWiper.A
VaristW32/Agent.OSPU-6752
huorongTrojan/KillDisk.bf
AviraTR/AVI.Ransom.zumap
ESET-NOD32Win32/KillDisk.NCV trojan
F-SecureTrojan.TR/AVI.Ransom.zumap
K7AntiVirusRiskware ( 0040eff71 )
K7GWRiskware ( 0040eff71 )
MalwarebytesMalware.AI.4139430074
TrellixENSGeneric .jt
ZoneAlarmMal/KillDisk-A
alibabacloudTrojan:Win/HermeticWiper.a

Process list

NameCommand line
1bc44eef75779e3ca1eefb8ff5a64807dbc942b1e4a2672d77b9f6928d292591.exe
61b25d11392172e587d8da3045812a66c3385451.malware.exe