PO DRAFT-Mt ch.exe

Classification: Malicious

PO DRAFT-Mt ch.exe is a malicious file sample. Linked to Agent Tesla malware. Reported by 1 threat source, last seen 2022-03-16.

Detection summary

  • 60 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: AGENT TESLA (S0331)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
AgentTesla MalwareBazaar Abuse.ch 2022-03-16 07:34:57 2022-03-16 07:34:57 malicious-activity S0331 Agent Tesla

Sample information

Filenames
PO DRAFT-Mt ch.exe
File type
application/x-dosexec
MD5
ea995b969b0731be0cd09d32eb154cc9
SHA-1
8608eb52418485aa6cc3c19871599e17c09d4b6a
SHA-256
2cb04eecfa244cba67a5bb51021c39605e37a75cd8231be675944c50443cc85e
First indexed
2022-03-16 09:15:16
Last updated
2026-09-03 00:13:04

Antivirus detections

EngineDetection
ALYacGen:Variant.Ransom.Loki.24029
APEXMalicious
AVGWin32:TrojanX-gen [Trj]
AhnLab-V3Trojan/Win.FormBook.C5014020
AlibabaTrojan:Win32/FormBook.1a70aa87
Antiy-AVLTrojan/Win32.Formbook
ArcabitTrojan.Ransom.Loki.D5DDD
AvastWin32:TrojanX-gen [Trj]
AviraHEUR/AGEN.1337930
BitDefenderGen:Variant.Ransom.Loki.24029
CTXexe.trojan.formbook
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
DrWebTrojan.PWS.Siggen3.13370
ESET-NOD32a variant of Generik.HRVOAPF
Elasticmalicious (high confidence)
EmsisoftGen:Variant.Ransom.Loki.24029 (B)
F-SecureHeuristic.HEUR/AGEN.1317085
FireEyeGen:Variant.Ransom.Loki.24029
FortinetW32/Injector.ETGJ!tr
GDataGen:Variant.Ransom.Loki.24029
GoogleDetected
IkarusTrojan.Win32.Injector
K7AntiVirusTrojan ( 00590df51 )
K7GWTrojan ( 00590df51 )
KasperskyHEUR:Trojan.Win32.Formbook.gen
Kingsoftmalware.kb.a.886
LionicTrojan.Win32.Formbook.4!c
MalwarebytesGeneric.Malware/Suspicious
McAfeeArtemis!EA995B969B07
McAfeeDti!2CB04EECFA24
MicroWorld-eScanGen:Variant.Ransom.Loki.24029
MicrosoftTrojan:Win32/Formbook.MAF!MTB
NANO-AntivirusTrojan.Win32.Formbook.jnjbxq
Paloaltogeneric.ml
PandaTrj/CI.A
SUPERAntiSpywareTrojan.Agent/Gen-Siggen
SangforTrojan.Win32.Formbook.Vadt
SentinelOneStatic AI - Suspicious PE
SkyhighFormbook-FUJC!F9CE39F937E2
SophosMal/Generic-S
SymantecTrojan.Gen.MBT
TencentWin32.Trojan.Formbook.Twhl
TrendMicroTROJ_FRS.0NA103CH22
TrendMicro-HouseCallTROJ_FRS.0NA103CH22
VBA32Trojan.Formbook
VIPREGen:Variant.Ransom.Loki.24029
VaristW32/Injector.AVH.gen!Eldorado
ViRobotTrojan.Win32.Z.Spy.351632
VirITTrojan.Win32.GenusT.DZSD
WebrootW32.Trojan.Gen
XcitiumMalware@#1ppg1dt9vdujp
YandexTrojan.Injector!8drLjT64f0k
ZillyaTrojan.Agensla.Win32.19548
ZoneAlarmHEUR:Trojan.Win32.Formbook.gen
ZonerTrojan.Win32.130922
alibabacloudTrojan:Win/Formbook.MM!2XJC
huorongHVM:Trojan/Injector.ay