Classification: Malicious
Baltic questionnaire.exe is a trojan (application/x-dosexec, 432.0 KB). Detected by 24 antivirus engines. Linked to Turla activity.
Detection summary
- 24 antivirus detections
- 4 IDS alerts
- 2 processes observed
- 3 contacted hosts
- 2 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Generic Malware |
Hybrid-Analysis |
2024-06-17 14:00:04 |
2026-08-18 13:45:03 |
malicious-activity
|
|
| Snake |
ThreatFox Abuse.ch |
2025-02-20 09:40:36 |
2025-02-22 09:26:33 |
|
G0010 Turla
|
| SnakeKeylogger |
MalwareBazaar Abuse.ch |
2024-06-08 19:26:51 |
2024-06-08 19:26:51 |
malicious-activity
|
|
Tags
win.snake
ekans
snakehose
keylogger
Sample information
- Filenames
- 2265e43c3f91487219234a3fda76b7077a1a70c6ee3b4672a7281faf06475542, Baltic questionnaire.exe
- File type
- application/x-dosexec
- Size
- 442368 bytes
- MD5
48382f79ecedd5b949b0457723c1d3fb- SHA-1
b32ff2ce69d19adf6ee4a0e2d39d9babd30c41e8- SHA-256
2265e43c3f91487219234a3fda76b7077a1a70c6ee3b4672a7281faf06475542- First indexed
- 2024-06-08 20:23:30
- Last updated
- 2026-09-21 23:17:33
Antivirus detections
| Engine | Detection |
|---|
| APEX | Malicious |
| AhnLab-V3 | Trojan/Win.Generic.C5626231 |
| Alibaba | Trojan:MSIL/SnakeKeylogger.5774f51b |
| Antiy-AVL | Trojan/MSIL.Crypt |
| Bkav | W32.AIDetectMalware.CS |
| Cylance | Unsafe |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Packed2.46916 |
| ESET-NOD32 | a variant of MSIL/Kryptik.ALTA |
| Elastic | malicious (moderate confidence) |
| FireEye | Generic.mg.48382f79ecedd5b9 |
| Fortinet | MSIL/Agent.AES!tr |
| Google | Detected |
| Kaspersky | HEUR:Trojan.MSIL.Crypt.gen |
| Malwarebytes | Trojan.MalPack.PNG.Generic |
| McAfeeD | ti!2265E43C3F91 |
| Paloalto | generic.ml |
| Panda | Trj/GdSda.A |
| SentinelOne | Static AI - Malicious PE |
| Sophos | Troj/Krypt-AFZ |
| Symantec | Scr.Malcode!gdn33 |
| Varist | W32/MSIL_Kryptik.KZU.gen!Eldorado |
| VirIT | Trojan.Win32.MSIL_Heur.A |
| ZoneAlarm | HEUR:Trojan.MSIL.Crypt.gen |
Process list
| Name | Command line |
|---|
| Balticquestionnaire.exe | |
| Balticquestionnaire.exe | |