STATEMENT Aug 2024.exe

Classification: Malicious

STATEMENT Aug 2024.exe is a trojan (application/x-dosexec). Detected by 75 antivirus engines. Linked to Turla activity.

Detection summary

  • 75 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: TURLA (G0010)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-08-18 23:45:04 2026-08-18 23:45:04 malicious-activity
Snake ThreatFox Abuse.ch 2025-02-20 09:40:56 2025-02-22 09:24:23 G0010 Turla
SnakeKeylogger MalwareBazaar Abuse.ch 2024-08-29 06:25:10 2024-08-29 06:25:10 malicious-activity

Tags

win.snake ekans snakehose evasive

Sample information

Filenames
25a0a3eaa4354133700aad4f1ff07de47f52e2d4db43524b6c180c9694111c31, STATEMENT Aug 2024.exe
File type
application/x-dosexec
MD5
42b1807d8cbadaa619c8746452ff2765
SHA-1
53c5ee73e1b7674f9a68f30a9cd26eac511171da
SHA-256
25a0a3eaa4354133700aad4f1ff07de47f52e2d4db43524b6c180c9694111c31
First indexed
2024-08-29 07:19:39
Last updated
2026-09-24 16:59:40

Antivirus detections

EngineDetection
APEXMalicious
AVGFileRepMalware [Misc]
AvastFileRepMalware [Misc]
AviraTR/AutoIt.biwse
BkavW32.AIDetectMalware
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
CynetMalicious (score: 99)
DeepInstinctMALICIOUS
ESET-NOD32a variant of Win32/Injector.Autoit.GHF
Elasticmalicious (high confidence)
F-SecureTrojan.TR/AutoIt.biwse
FireEyeGeneric.mg.42b1807d8cbadaa6
FortinetAutoIt/Injector.GHD!tr
GDataMSIL.Trojan-Spy.Snake.F9RN9Z
GoogleDetected
IkarusWin32.SuspectCrc
KasperskyTrojan.MSIL.Crypt.iljj
LionicTrojan.Win64.Injects.ts93
MalwarebytesMachineLearning/Anomalous.96%
McAfeeArtemis!42B1807D8CBA
McAfeeDti!25A0A3EAA435
MicrosoftTrojan:Win32/DorkBot.DU
PandaTrj/Genetic.gen
RisingTrojan.Injector/Autoit!1.1020E (CLASSIC)
SangforTrojan.Win32.Injector.V0g7
SkyhighBehavesLike.Win32.Genericuh.th
SophosMal/Generic-S
SymantecML.Attribute.HighConfidence
TrendMicroTrojanSpy.Win32.SNAKEKEYLOGGER.YXEH2Z
TrendMicro-HouseCallTrojanSpy.Win32.SNAKEKEYLOGGER.YXEH2Z
VBA32Trojan.Autoit.F
VaristW32/Trojan.JJPF-8876
VirITTrojan.Win32.AutoIt_Heur.A
YandexTrojan.Igent.b2Tyh7.2
ZoneAlarmTrojan.MSIL.Crypt.iljj
ALYacTrojan.Generic.36732863
AVGAutoIt:Obfuscated-I [Cryp]
AhnLab-V3Trojan/Win.DorkBot.C5665183
AlibabaTrojan:Win32/DorkBot.bd2d834f
Antiy-AVLTrojan/Win32.AutoitInject
ArcabitTrojan.Generic.D2307FBF
AvastAutoIt:Obfuscated-I [Cryp]
AviraHEUR/AGEN.1378754
BitDefenderTrojan.Generic.36732863
CTXexe.trojan.autoit
DrWebTrojan.KeyloggerNET.54
ESET-NOD32Win32/Injector.Autoit.GHF trojan
EmsisoftTrojan.Generic.36732863 (B)
F-SecureHeuristic.HEUR/AGEN.1378754
GDataTrojan.Generic.36732863
IkarusTrojan.Autoit
K7AntiVirusRiskware ( 0040eff71 )
K7GWRiskware ( 0040eff71 )
KingsoftMSIL.Trojan.Crypt.iljj
LionicTrojan.Win32.Autoit.4!c
MalwarebytesTrojan.Injector.AutoIt
MaxSecureTrojan.Malware.5609168.susgen
MicroWorld-eScanTrojan.Generic.36732863
MicrosoftTrojan:Win32/DorkBot!rfn
NANO-AntivirusTrojan.Win32.KeyloggerNET.krjgjv
Paloaltogeneric.ml
RisingTrojan.Injector/Autoit!1.1020E (CLOUD)
SangforVirus.Win32.Save.a
SkyhighBehavesLike.Win32.Dropper.th
SophosMal/AuItInj-D
TencentMsil.Trojan.Crypt.Htgl
TrellixENSArtemis!42B1807D8CBA
TrendMicroTROJ_GEN.R002C0DEQ25
TrendMicro-HouseCallTROJ_GEN.R002C0DEQ25
VIPRETrojan.Generic.36732863
VirITTrojan.Win32.AutoIt_Heur.L
ZoneAlarmMal/AuItInj-D
alibabacloudTrojan:Win/DorkBot.DC
huorongTrojan/AutoIT.Injector.bs