2026-08-23_567ade9b9267a9f4cab797881d68413e_agent-tesla_darkgate_elex_maze_remcos
Classification: Malicious
2026-08-23_567ade9b9267a9f4cab797881d68413e_agent-tesla_darkgate_elex_maze_remcos is a trojan. Detected by 45 antivirus engines.
Detection summary
- 45 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: REVENGE RAT (S0379)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Revengerat | Triage | 2026-08-24 11:30:17 | 2026-08-24 11:30:17 | malicious-activity | S0379 Revenge RAT |
Tags
revengerat guest discovery persistence privilege_escalation trojanSample information
- Filenames
- 2026-08-23_567ade9b9267a9f4cab797881d68413e_agent-tesla_darkgate_elex_maze_remcos
- SHA-256
1ece8504d5147ce3d68a7b033b52f0ddbe69bc6a4f9cc5b12b26e2c5e3ce7e13- First indexed
- 2026-08-24 11:30:17
- Last updated
- 2026-10-13 06:02:39
Antivirus detections
| Engine | Detection |
|---|---|
| APEX | Malicious |
| AVG | Script:SNH-gen [Trj] |
| AhnLab-V3 | Win-Trojan/AutoInj.Exp |
| Alibaba | Trojan:Win32/AutoitU.ali2000008 |
| Antiy-AVL | HackTool[VirTool]/Win32.AutInject |
| Avast | Script:SNH-gen [Trj] |
| Bkav | W32.Malware.B742DB74 |
| CTX | exe.trojan.autoit |
| ClamAV | Win.Trojan.Autoit-9790232-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | BackDoor.RevetRat.2 |
| ESET-NOD32 | Win32/Injector.Autoit.DWA trojan |
| Elastic | malicious (high confidence) |
| Fortinet | AutoIt/Injector.DWA!tr |
| GData | MSIL.Backdoor.RevengeRAT.W0ULI9 |
| Detected | |
| Gridinsoft | Trojan.Win32.Downloader.oa!s1 |
| K7AntiVirus | Trojan ( 005988621 ) |
| K7GW | Trojan ( 005988621 ) |
| Kaspersky | HEUR:Trojan.Script.Generic |
| Lionic | Trojan.Script.Generic.4!c |
| Malwarebytes | Malware.AI.288779274 |
| MaxSecure | Trojan.Malware.300983.susgen |
| McAfeeD | ti!1ECE8504D514 |
| Microsoft | Trojan:Win32/Remcos!pz |
| Paloalto | generic.ml |
| Panda | Trj/Genetic.gen |
| Rising | Trojan.Injector/Autoit!1.BB8F (CLOUD) |
| Sangfor | Virus.Win32.Save.a |
| Skyhigh | BehavesLike.Win32.Dropper.tc |
| Sophos | Mal/AuItInj-A |
| Symantec | AUT.Heuristic!gen5 |
| Tencent | Unk.Win32.Script.404973 |
| TrellixENS | Artemis!567ADE9B9267 |
| TrendMicro | Trojan.AutoIt.CRYPTINJECT.SMA |
| TrendMicro-HouseCall | Trojan.AutoIt.CRYPTINJECT.SMA |
| VBA32 | Backdoor.RevetRat |
| Varist | W32/Autoit.WI.gen!Eldorado |
| Zillya | Trojan.Injector.Win32.787351 |
| ZoneAlarm | Mal/AuItInj-A |
| alibabacloud | Trojan:Win/Revenge.50dec5f5 |
| tehtris | Generic.Malware |