res_out.exe
Classification: Malicious
res_out.exe is a trojan (application/x-dosexec). Detected by 4 antivirus engines. Linked to Rokrat malware. 51 sightings, last seen 2026-08-19.
Detection summary
- 4 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: ROKRAT (S0240)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-08-19 08:45:06 | 2026-08-19 08:45:06 | malicious-activity | |
| RokRAT | ThreatFox Abuse.ch | 2024-09-06 20:32:55 | 2024-09-08 20:21:23 | S0240 ROKRAT | |
| Generic.Malware | MalwareBazaar Abuse.ch | 2024-09-06 10:44:02 | 2024-09-06 10:44:02 | malicious-activity |
Tags
win.rokrat dogcall evasiveSample information
- Filenames
- 2be849154e91a1aa43a1914c7253f08f0029854d309ab4e3d0e264a7424ee8cc, res_out.exe
- File type
- application/x-dosexec
- MD5
bf9ec01c25506a02c399ac19f154b9fd- SHA-1
c2563bd4dde7108c68d2f0eab24ddad600132e0f- SHA-256
2be849154e91a1aa43a1914c7253f08f0029854d309ab4e3d0e264a7424ee8cc- First indexed
- 2024-09-06 11:20:13
- Last updated
- 2026-09-04 08:36:34
Antivirus detections
| Engine | Detection |
|---|---|
| ESET-NOD32 | a variant of Win32/GenKryptik.GZLU |
| McAfeeD | ti!2BE849154E91 |
| Microsoft | Trojan:Win32/Wacatac.B!ml |
| Rising | Trojan.Injector!1.FCCE (CLASSIC) |