Classification: Malicious
表格目录名单178.exe is a trojan (Windows executable, 5.9 MB). Detected by 59 antivirus engines. Linked to Mimikatz malware. 8 sightings, last seen 2026-08-18.
Detection summary
- 59 antivirus detections
- 0 IDS alerts
- 114 processes observed
- 1 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Generic Malware |
Hybrid-Analysis |
2024-06-12 11:45:05 |
2026-08-18 21:45:05 |
malicious-activity
|
|
| MimiKatz |
ThreatFox Abuse.ch |
2025-03-17 17:37:10 |
2025-03-19 17:29:31 |
|
S0002 Mimikatz
|
| Generic.Malware |
MalwareBazaar Abuse.ch |
2024-06-12 11:14:17 |
2024-06-12 11:14:17 |
malicious-activity
|
|
Tags
evasive
windows-server-utility
win.mimikatz
Sample information
- Filenames
- 240c056fa0a024742d65a67a8f494658837dded48bf892f6209750b1265bdf7c, 表格目录名单178.exe, è¡¨æ ¼ç®å½åå178.exe
- File type
- PE32 executable (GUI) Intel 80386, for MS Windows
- Size
- 6162336 bytes
- MD5
00cc9132003c0c5a282013898577b795- SHA-1
cf9024e742e69b7715a7cdcac7363743ca226cb6- SHA-256
240c056fa0a024742d65a67a8f494658837dded48bf892f6209750b1265bdf7c- First indexed
- 2024-06-12 11:23:27
- Last updated
- 2026-10-17 00:48:13
Antivirus detections
| Engine | Detection |
|---|
| BitDefenderTheta | Gen:NN.ZexaE.36806.@B1@amVZPMnP |
| Bkav | W32.AIDetectMalware |
| CrowdStrike | win/grayware_confidence_60% (D) |
| Cylance | Unsafe |
| DrWeb | Trojan.MulDrop8.1933 |
| Elastic | malicious (high confidence) |
| Google | Detected |
| Ikarus | Trojan.SuspectCRC |
| Kaspersky | VHO:Backdoor.Win32.Farfli.gen |
| Malwarebytes | Malware.AI.3995567019 |
| McAfeeD | ti!240C056FA0A0 |
| Rising | [email protected] (RDML:xF+QfZiGqTgY44CTfEa9Jw) |
| SentinelOne | Static AI - Suspicious PE |
| ZoneAlarm | VHO:Backdoor.Win32.Farfli.gen |
| ALYac | Trojan.GenericKD.73119363 |
| AVG | Win32:Evo-gen [Trj] |
| AhnLab-V3 | Trojan/Win.Farfli.C5641762 |
| Alibaba | Backdoor:Win32/Farfli.3cf79738 |
| Antiy-AVL | Trojan[Backdoor]/Win32.Farfli |
| Arcabit | Trojan.Generic.D45BB683 |
| Avast | Win32:Evo-gen [Trj] |
| Avira | TR/AD.Farfli.pudet |
| BitDefender | Trojan.GenericKD.73119363 |
| CAT-QuickHeal | Trojan.Ghanarava.171833079877b795 |
| CTX | exe.trojan.farfli |
| CrowdStrike | win/malicious_confidence_60% (W) |
| Cynet | Malicious (score: 99) |
| DeepInstinct | MALICIOUS |
| ESET-NOD32 | a variant of Win32/GenKryptik.GYRU |
| Emsisoft | Trojan.GenericKD.73119363 (B) |
| F-Secure | Trojan.TR/AD.Farfli.pudet |
| FireEye | Trojan.GenericKD.73119363 |
| Fortinet | PossibleThreat.MU |
| GData | Trojan.GenericKD.73119363 |
| K7AntiVirus | Riskware ( 00584baa1 ) |
| K7GW | Riskware ( 00584baa1 ) |
| Kaspersky | Backdoor.Win32.Farfli.cumu |
| Kingsoft | Win32.Hack.Farfli.cumu |
| Lionic | Trojan.Win32.Farfli.m!c |
| Malwarebytes | Malware.AI.452610001 |
| MaxSecure | Trojan.Malware.257494036.susgen |
| MicroWorld-eScan | Trojan.GenericKD.73119363 |
| Microsoft | HackTool:Win32/Mimikatz.F |
| NANO-Antivirus | Trojan.Win32.Farfli.kqqpjl |
| Paloalto | generic.ml |
| Panda | Trj/RnkBend.A |
| Sangfor | Backdoor.Win32.Farfli.V00k |
| Sophos | Generic Reputation PUA (PUA) |
| Symantec | Hacktool.Mimikatz |
| Tencent | Malware.Win32.Gencirc.14364bc2 |
| TrendMicro-HouseCall | TROJ_GEN.R002H09AM25 |
| VBA32 | Backdoor.Farfli |
| VIPRE | Trojan.GenericKD.73119363 |
| Varist | W32/ABRisk.DBIP-8368 |
| VirIT | Trojan.Win32.Genus.VWL |
| Xcitium | Malware@#1f39m0w3etx6p |
| Yandex | Backdoor.Farfli!YlzfXvEdZvo |
| Zillya | Backdoor.Farfli.Win32.16510 |
| alibabacloud | HackTool:Win/Farfli.cwnx |
Process list
| Name | Command line |
|---|
| _178.exe | |
| ttttt.exe | |
| WerFault.exe | -u -p 8160 -s 944 |
| WerFault.exe | -u -p 8160 -s 944 |
| NOTEPAD.EXE | %PROGRAMFILES%\²âÊÔ\н¨Îı¾Îĵµ.txt |
| tt.exe | |
| Client.exe | |
| EP.exe | |
| EP.exe | |
| WerFault.exe | -u -p 5684 -s 340 |
| WerFault.exe | -u -p 5684 -s 368 |
| Client.exe | |
| EP.exe | |
| EP.exe | |
| WerFault.exe | -u -p 2152 -s 356 |
| WerFault.exe | -u -p 2152 -s 364 |
| Client.exe | |
| EP.exe | |
| EP.exe | |
| WerFault.exe | -u -p 6240 -s 332 |
| WerFault.exe | -u -p 6240 -s 368 |
| Client.exe | |
| EP.exe | |
| EP.exe | |
| WerFault.exe | -u -p 2752 -s 348 |
| WerFault.exe | -u -p 2752 -s 368 |
| Client.exe | |
| EP.exe | |
| EP.exe | |
| WerFault.exe | -u -p 7980 -s 352 |