2026-08-23_0cf9484b5a0eafc2c7a8c3debfd70d1e_agent-tesla_darkgate_elex_maze_remcos
Classification: Malicious
2026-08-23_0cf9484b5a0eafc2c7a8c3debfd70d1e_agent-tesla_darkgate_elex_maze_remcos is a trojan. Detected by 45 antivirus engines.
Detection summary
- 45 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: REVENGE RAT (S0379)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Revengerat | Triage | 2026-08-24 17:28:36 | 2026-08-24 17:28:36 | malicious-activity | S0379 Revenge RAT |
Tags
revengerat guest discovery persistence privilege_escalation trojanSample information
- Filenames
- 2026-08-23_0cf9484b5a0eafc2c7a8c3debfd70d1e_agent-tesla_darkgate_elex_maze_remcos
- SHA-256
21b97c7a541139d8169e18e94b8b4759a428b233812d2841df78f725726070bc- First indexed
- 2026-08-24 17:28:36
- Last updated
- 2026-09-30 01:35:35
Antivirus detections
| Engine | Detection |
|---|---|
| APEX | Malicious |
| AVG | Script:SNH-gen [Trj] |
| AhnLab-V3 | Win-Trojan/AutoInj.Exp |
| Alibaba | Trojan:Win32/AutoitU.ali2000008 |
| Antiy-AVL | HackTool[VirTool]/Win32.AutInject |
| Avast | Script:SNH-gen [Trj] |
| Bkav | W32.Malware.6870FA53 |
| ClamAV | Win.Trojan.Autoit-9790232-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | BackDoor.RevetRat.2 |
| ESET-NOD32 | Win32/Injector.Autoit.DWA trojan |
| Elastic | malicious (high confidence) |
| Fortinet | AutoIt/Injector.DWA!tr |
| GData | MSIL.Backdoor.RevengeRAT.FWMAXR |
| Detected | |
| Gridinsoft | Trojan.Win32.Downloader.oa!s1 |
| K7AntiVirus | Trojan ( 005988621 ) |
| K7GW | Trojan ( 005988621 ) |
| Kaspersky | HEUR:Trojan.Script.Generic |
| Kingsoft | malware.kb.a.997 |
| Lionic | Trojan.Script.Generic.4!c |
| Malwarebytes | Malware.AI.288779274 |
| MaxSecure | Trojan.Malware.300983.susgen |
| McAfeeD | ti!21B97C7A5411 |
| Microsoft | Trojan:Win32/Remcos!pz |
| Paloalto | generic.ml |
| Panda | Trj/Genetic.gen |
| Rising | Trojan.Injector/Autoit!1.BB8F (CLOUD) |
| Sangfor | Virus.Win32.Save.a |
| Skyhigh | BehavesLike.Win32.Dropper.tc |
| Sophos | Mal/AuItInj-A |
| Symantec | AUT.Heuristic!gen5 |
| Tencent | Unk.Win32.Script.404973 |
| TrellixENS | Artemis!0CF9484B5A0E |
| TrendMicro | Trojan.AutoIt.CRYPTINJECT.SMA |
| TrendMicro-HouseCall | Trojan.AutoIt.CRYPTINJECT.SMA |
| VBA32 | Backdoor.RevetRat |
| Varist | W32/Autoit.WI.gen!Eldorado |
| Zillya | Trojan.Injector.Win32.787351 |
| ZoneAlarm | Mal/AuItInj-A |
| alibabacloud | Trojan:Win/Revenge.50dec5f5 |
| tehtris | Generic.Malware |