SOLICITUD DE COTIZACION.exe
Classification: Malicious
SOLICITUD DE COTIZACION.exe is a trojan (Windows executable). Detected by 31 antivirus engines. Linked to Darktortilla malware.
Detection summary
- 31 antivirus detections
- 1 IDS alerts
- 0 processes observed
- 1 contacted hosts
- 1 DNS requests
MITRE ATT&CK associations
Malware families: DARKTORTILLA (S1066)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-02-09 15:45:04 | 2026-02-09 15:45:04 | ||
| Xworm | Triage | 2026-02-09 14:48:13 | 2026-02-09 15:25:22 | malicious-activity | |
| DarkTortilla | MalwareBazaar Abuse.ch | 2026-02-09 14:48:03 | 2026-02-09 14:48:03 | malicious-activity | S1066 DarkTortilla |
Tags
xworm discovery rat trojan evasive windows-server-utilitySample information
- Filenames
- SOLICITUD DE COTIZACION.exe, _20beaec4ad8341161ef0a36de86a02923cb904d438823f86fd7dce0682429922.exe, 20beaec4ad8341161ef0a36de86a02923cb904d438823f86fd7dce0682429922.bin
- File type
- PE32 executable for MS Windows 6.00 (GUI), Intel i ...
- MD5
fd5b916f6e185e9cd042223c8a61b400- SHA-1
129926143866e0548a91e054535a70b3e8b57b7d- SHA-256
20beaec4ad8341161ef0a36de86a02923cb904d438823f86fd7dce0682429922- SHA-512
ce9d06de92a61cadd7e64e500bfacae6cbf36df2dafb4f085f5244c849eceff884c4e3785a0b1c48ea0c00439ba6d1d3c8d9a5f5a9dfd8e2467f169340612925- First indexed
- 2026-02-09 14:48:03
- Last updated
- 2026-09-18 21:10:11
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.MSIL.Basic.8.Gen |
| APEX | Malicious |
| Arcabit | Trojan.MSIL.Basic.8.Gen |
| Avira | HEUR/AGEN.1307481 |
| BitDefender | Trojan.MSIL.Basic.8.Gen |
| Bkav | W32.AIDetectMalware.CS |
| CTX | exe.trojan.basic |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cylance | Unsafe |
| DeepInstinct | MALICIOUS |
| ESET-NOD32 | MSIL/Kryptik.APME trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Trojan.MSIL.Basic.8.Gen (B) |
| F-Secure | Heuristic.HEUR/AGEN.1307481 |
| GData | Trojan.MSIL.Basic.8.Gen |
| Detected | |
| Ikarus | Trojan.MSIL.Crypt |
| Kaspersky | VHO:Backdoor.Win32.Convagent.gen |
| Malwarebytes | Malware.AI.1274858395 |
| McAfeeD | ti!20BEAEC4AD83 |
| MicroWorld-eScan | Trojan.MSIL.Basic.8.Gen |
| Microsoft | Trojan:Win32/Wacatac.B!ml |
| Rising | Malware.Obfus/[email protected] (RDM.MSIL2:HpYNIgyLsVOq/SX6orEWMg) |
| SentinelOne | Static AI - Malicious PE |
| Sophos | Generic ML PUA (PUA) |
| Symantec | ML.Attribute.HighConfidence |
| TrendMicro-HouseCall | Trojan.Win32.VSX.PE04C9t |
| VBA32 | Malware-Cryptor.MSIL.AgentTesla.Heur |
| VIPRE | Trojan.MSIL.Basic.8.Gen |
| Varist | W32/MSIL_Agent.KTL.gen!Eldorado |
| VirIT | Trojan.Win32.MSIL_Heur.A |