COTIZACIÓN METALINSPEC.exe
Classification: Malicious
COTIZACIÓN METALINSPEC.exe is a trojan (Windows executable). Detected by 54 antivirus engines. Linked to Darktortilla malware.
Detection summary
- 54 antivirus detections
- 1 IDS alerts
- 0 processes observed
- 1 contacted hosts
- 1 DNS requests
MITRE ATT&CK associations
Malware families: DARKTORTILLA (S1066)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-03-31 11:45:04 | 2026-03-31 11:45:04 | ||
| DarkTortilla | MalwareBazaar Abuse.ch | 2026-03-31 10:52:34 | 2026-03-31 10:52:34 | malicious-activity | S1066 DarkTortilla |
| Xworm | Triage | 2026-03-31 10:52:19 | 2026-03-31 10:52:19 | malicious-activity |
Tags
xworm discovery rat trojanSample information
- Filenames
- COTIZACIÓN METALINSPEC.exe, 27f555873ce5ab6b6cdbfa5690db3a663793be34e29917be22ef1e9cb1d2dec1.bin
- File type
- PE32 executable for MS Windows 4.00 (GUI), Intel i ...
- MD5
12c2a95893c7fb3b63248b3b51ca53e1- SHA-1
076ba2d96adfc5d01b6abe481e544ff3ddecf100- SHA-256
27f555873ce5ab6b6cdbfa5690db3a663793be34e29917be22ef1e9cb1d2dec1- First indexed
- 2026-03-31 10:52:19
- Last updated
- 2026-09-23 23:53:51
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.MSIL.Basic.8.Gen |
| APEX | Malicious |
| AVG | Win32:MalwareX-gen [Misc] |
| AhnLab-V3 | Trojan/Win.Generic.C5863529 |
| Alibaba | TrojanPSW:MSIL/Stealer.81404cc8 |
| Antiy-AVL | Trojan[PSW]/MSIL.Stealer |
| Arcabit | Trojan.MSIL.Basic.8.Gen |
| Avast | Win32:MalwareX-gen [Misc] |
| Avira | TR/W32.Agent |
| BitDefender | Trojan.MSIL.Basic.8.Gen |
| Bkav | W32.Malware.350E2BDB |
| CTX | exe.trojan.msil |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.PackedNET.3465 |
| ESET-NOD32 | MSIL/Kryptik.APXJ trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Trojan.MSIL.Basic.8.Gen (B) |
| F-Secure | Trojan.TR/W32.Agent |
| Fortinet | MSIL/Kryptik.AKJG!tr |
| GData | Trojan.MSIL.Basic.8.Gen |
| Detected | |
| K7AntiVirus | Trojan ( 700000201 ) |
| K7GW | Trojan ( 700000201 ) |
| Kaspersky | HEUR:Trojan-PSW.MSIL.Stealer.gen |
| Kingsoft | MSIL.Trojan-PSW.Stealer.gen |
| Lionic | Trojan.Win32.Basic.i!c |
| Malwarebytes | Trojan.Downloader.MSIL |
| MaxSecure | Trojan.Malware.658394805.susgen |
| McAfeeD | Trojan:Win/Vidar.TB |
| MicroWorld-eScan | Trojan.MSIL.Basic.8.Gen |
| Microsoft | Trojan:Win32/Kepavll!rfn |
| Paloalto | generic.ml |
| Panda | Trj/PhxBzA.A |
| Rising | Malware.Obfus/[email protected] (RDM.MSIL2:1+wXHOKPNRf0cIcar5zJJA) |
| Sangfor | Infostealer.Msil.Kryptik.Vv6n |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | Artemis!Trojan |
| Sophos | Mal/Generic-S |
| Symantec | ML.Attribute.HighConfidence |
| Tencent | Malware.Win32.Gencirc.10c46865 |
| Trapmine | malicious.moderate.ml.score |
| TrellixENS | Artemis!12C2A95893C7 |
| TrendMicro | Trojan.MSIL.KEPAVLL.TL0101DT26ZZ |
| TrendMicro-HouseCall | Trojan.MSIL.KEPAVLL.TL0101DT26ZZ |
| VBA32 | TScope.Trojan.MSIL |
| VIPRE | Trojan.MSIL.Basic.8.Gen |
| Varist | W32/MSIL_Agent.KBL.gen!Eldorado |
| ViRobot | Trojan.Win.Z.Kryptik.754688.AF |
| VirIT | Trojan.Win32.MSIL_Heur.A |
| Yandex | Trojan.Igent.b6hGYN.1 |
| alibabacloud | Trojan[stealer]:MSIL/Kepavll.Gen |
| huorong | Trojan/MSIL.Injector.nj |