ExeFile (20).exe

Classification: Malicious

ExeFile (20).exe is a trojan (application/x-dosexec). Detected by 95 antivirus engines. Linked to Runningrat malware.

Detection summary

  • 95 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: RUNNINGRAT (S0253)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-08-18 12:45:05 2026-08-18 12:45:05 malicious-activity
RunningRAT MalwareBazaar Abuse.ch 2024-08-20 13:54:58 2024-08-20 13:54:58 malicious-activity S0253 RunningRAT

Sample information

Filenames
223278e7f27613207535c392734433b4413da28fe44e43c89c2379475430f67d, ExeFile (20).exe
File type
application/x-dosexec
MD5
376f65c925a7319f88beee5075cfa944
SHA-1
c4e6099c945fb3a686f0a5f32108f3ca1334d3be
SHA-256
223278e7f27613207535c392734433b4413da28fe44e43c89c2379475430f67d
First indexed
2024-08-20 15:20:28
Last updated
2026-08-18 12:45:05

Antivirus detections

EngineDetection
ALYacTrojan.GenericKD.40455963
APEXMalicious
AVGWin32:CoinminerX-gen [Trj]
AhnLab-V3Trojan/Win32.Siscos.R199489
AlibabaMalware:Win32/km_2ee9d.None
Antiy-AVLTrojan/Win32.Siscos
ArcabitTrojan.Generic.D2694F1B
AvastWin32:CoinminerX-gen [Trj]
AviraTR/AD.Farfli.cznig
BitDefenderTrojan.GenericKD.40455963
BitDefenderThetaGen:NN.ZexaF.36270.hy0@am1sDGne
BkavW32.FamVT.Renamer1.Trojan
CAT-QuickHealBackdoor.VenikRI.S16788663
ClamAVWin.Dropper.Gh0stRAT-6997745-0
CrowdStrikewin/malicious_confidence_100% (W)
Cybereasonmalicious.925a73
Cylanceunsafe
CynetMalicious (score: 100)
CyrenW32/Siscos.E.gen!Eldorado
DeepInstinctMALICIOUS
DrWebTrojan.DownLoader23.39271
ESET-NOD32Win32/Farfli.CEN
Elasticmalicious (high confidence)
EmsisoftTrojan.Farfli (A)
F-SecureTrojan.TR/AD.Farfli.cznig
FireEyeGeneric.mg.376f65c925a7319f
FortinetW32/Farfli.CEN!tr
GDataWin32.Trojan.Siscos.A
GoogleDetected
GridinsoftTrojan.Win32.Downloader.oa
IkarusTrojan.Win32.Farfli
JiangminTrojan.Siscos.cd
K7AntiVirusTrojan ( 00522d7f1 )
K7GWTrojan ( 00522d7f1 )
KasperskyTrojan.Win32.Siscos.wbm
LionicTrojan.Win32.Siscos.tpvk
MAXmalware (ai score=100)
MalwarebytesFarFli.Backdoor.Bot.DDS
MaxSecureTrojan.Malware.10800876.susgen
McAfeeGenericRXBH-NF!376F65C925A7
McAfee-GW-EditionGenericRXBH-NF!376F65C925A7
MicroWorld-eScanTrojan.GenericKD.40455963
MicrosoftTrojan:Win32/Vindor!pz
NANO-AntivirusTrojan.Win32.Siscos.enrcbv
PandaTrj/Genetic.gen
RisingTrojan.Farfli!1.C639 (KTSE)
SUPERAntiSpywareAdware.Farli/Variant
SangforSuspicious.Win32.Save.ins
SentinelOneStatic AI - Suspicious PE
SophosTroj/AutoG-AD
SymantecML.Attribute.HighConfidence
TACHYONTrojan/W32.Agent.114688.DJP
TencentTrojan.Win32.Siscos.za
TrendMicroBKDR_ZEGOST.SM35
TrendMicro-HouseCallBKDR_ZEGOST.SM35
VBA32BScope.Trojan.Siscos
VIPRETrojan.GenericKD.40455963
ViRobotTrojan.Win32.Agent.114688.DM
VirITTrojan.Win32.Dnldr23.CGCL
WebrootW32.Trojan.Gen
XcitiumTrojWare.Win32.GameThief.Magania.~NWABU@18g2sq
ZillyaTrojan.Siscos.Win32.4780
ZoneAlarmTrojan.Win32.Siscos.wbm
ZonerTrojan.Win32.90956
AVGWin32:MalwareX-gen [Miner]
Antiy-AVLTrojan/Win32.Farfli
AvastWin32:MalwareX-gen [Miner]
CTXexe.trojan.siscos
CylanceUnsafe
CynetMalicious (score: 99)
GridinsoftTrojan.Win32.Agent.vb!n
IkarusBackdoor.Win32.Venik
K7AntiVirusTrojan ( 005412c41 )
K7GWTrojan ( 005412c41 )
KingsoftWin32.Trojan.Siscos.wbm
MalwarebytesGeneric.Malware.AI.DDS
MaxSecureTrojan.Malware.409434464.susgen
McAfeeDReal Protect-LS!376F65C925A7
MicrosoftBackdoor:Win32/Venik!pz
Paloaltogeneric.ml
SangforSuspicious.Win32.Save.a
SkyhighGenericRXBH-NF!376F65C925A7
TrellixENSGenericRXBH-NF!376F65C925A7
VaristW32/Siscos.E.gen!Eldorado
ZoneAlarmTroj/AutoG-AD
alibabacloudBackdoor:Win/Farfli
huorongBackdoor/Farfli.bn
BkavW32.AIDetectMalware
ESET-NOD32Win32/Farfli.CEN trojan
K7AntiVirusBackdoor ( 005ce2de1 )
K7GWBackdoor ( 005ce2de1 )
Kingsoftmalware.kb.a.999
MalwarebytesGeneric.Malware.Gen.DDS
MaxSecureTrojan.Malware.2164842.susgen
YandexTrojan.GenAsa!I74Hu0e5Xnc