2026-10-15_017c4112e42d455f9421e692bcd0b3c0_agent-tesla_darkgate_elex_hawkeye_maze_netwire_remcos_xloader
Classification: Malicious
2026-10-15_017c4112e42d455f9421e692bcd0b3c0_agent-tesla_darkgate_elex_hawkeye_maze_netwire_remcos_xloader is a trojan. Detected by 55 antivirus engines.
Detection summary
- 55 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: NETWIRE (S0198)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Netwire | Triage | 2026-10-17 00:34:35 | 2026-10-17 00:34:35 | malicious-activity | S0198 NETWIRE |
Tags
netwire warzonerat botnet defense_evasion discovery execution infostealer persistence rat stealerSample information
- Filenames
- 2026-10-15_017c4112e42d455f9421e692bcd0b3c0_agent-tesla_darkgate_elex_hawkeye_maze_netwire_remcos_xloader
- SHA-256
1ca6eaa5572ec52a8caf6195daeb465238352bbd88ef339e94a0c247298725bf- First indexed
- 2026-10-17 00:34:35
- Last updated
- 2026-10-17 00:34:35
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.Weecnaw.3 |
| APEX | Malicious |
| AVG | Win32:MalwareX-gen [Rat] |
| AhnLab-V3 | Win-Trojan/AutoInj.Exp |
| Antiy-AVL | Trojan/Win32.Autoit |
| Arcabit | Trojan.Weecnaw.3 |
| Avast | Win32:MalwareX-gen [Rat] |
| Avira | TR/Spy.Gen |
| BitDefender | Trojan.Weecnaw.3 |
| Bkav | W32.Malware.10FC0718 |
| CTX | exe.trojan.weecnaw |
| ClamAV | Win.Trojan.Ulise-7135679-1 |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | BackDoor.Wirenet.543 |
| ESET-NOD32 | Win32/Spy.Weecnaw.O trojan |
| Elastic | Windows.Trojan.Netwire |
| Emsisoft | Trojan.Weecnaw.3 (B) |
| F-Secure | Trojan.TR/Spy.Gen |
| Fortinet | AutoIt/Injector.DUY!tr |
| GData | Trojan.Weecnaw.3 |
| Detected | |
| Ikarus | Trojan.Win32.Autoit |
| K7AntiVirus | Trojan ( 005c86201 ) |
| K7GW | Trojan ( 005c86201 ) |
| Kaspersky | Trojan.Win32.NetWire.bh |
| Malwarebytes | Weecnaw.Spyware.Stealer.DDS |
| MaxSecure | Trojan.Malware.300983.susgen |
| McAfeeD | ti!1CA6EAA5572E |
| MicroWorld-eScan | Trojan.Weecnaw.3 |
| Microsoft | Trojan:Win32/NetWire!pz |
| NANO-Antivirus | Trojan.Win32.Dapato.fbcjkw |
| Rising | Backdoor.NetWire!1.B84F (CLASSIC) |
| Sangfor | Virus.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win32.Dropper.th |
| Sophos | Troj/Netwire-MS |
| Symantec | AUT.Heuristic!gen6 |
| Tencent | Trojan.Win32.Autoit_new.404661 |
| TrellixENS | Trojan-AitInject.ak |
| TrendMicro | TSPY_WEECNAW.SMC |
| TrendMicro-HouseCall | TSPY_WEECNAW.SMC |
| VBA32 | Trojan.NetWire |
| VIPRE | Trojan.Weecnaw.3 |
| Varist | W32/FakeDoc.G.gen!Eldorado |
| VirIT | Backdoor.Win32.Wirenet.CCS |
| Xcitium | TrojWare.Win32.TrojanSpy.Loyeetro.A@8lofxp |
| Yandex | Trojan.GenAsa!wuPhUbOs0XU |
| ZoneAlarm | Mal/AuItInj-A |
| Zoner | Trojan.Win32.124944 |
| alibabacloud | Trojan:Win/Weecnaw.9a2d5396 |
| huorong | Trojan/Injector.blh |
| tehtris | Generic.Malware |