2d8f73c1f2e5b803ad6716644361c20b51ba49fa79361ef0bc1ae3a735968459.exe

Classification: Malicious

2d8f73c1f2e5b803ad6716644361c20b51ba49fa79361ef0bc1ae3a735968459.exe is a malicious file sample. Linked to Apt29 activity. Detected by 70 antivirus engines.

Detection summary

  • 70 antivirus detections (71% detection ratio)
  • 0 IDS alerts
  • 5 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: APT29 (G0016)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2023-06-21 07:26:01 2023-06-21 07:26:01
Apt 29 Maltiverse 2023-02-06 04:30:12 2023-02-07 06:33:53 malicious-activity G0016 APT29

Tags

apt apt28 fancybear group-4127 group74 irontwilight pawnstorm sednit sofacy strontium swallowtail tag_0700 tg-4127 tsarteam

Sample information

Filenames
2d8f73c1f2e5b803ad6716644361c20b51ba49fa79361ef0bc1ae3a735968459.exe
File type
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Size
49152 bytes
MD5
eb463a1b960168a16ed788f4c9d1fbd6
SHA-1
f6d185220d5d1bcce21195a603fd73b0e9a04220
SHA-256
2d8f73c1f2e5b803ad6716644361c20b51ba49fa79361ef0bc1ae3a735968459
First indexed
2023-02-07 06:33:53
Last updated
2026-02-24 07:15:55

Antivirus detections

EngineDetection
LionicTrojan.Win64.Agentb.a!c
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader45.24459
CynetMalicious (score: 100)
McAfeeRDN/Agentb
VIPREGen:Variant.Ulise.384314
SangforTrojan.Win64.Agent.V7ce
K7AntiVirusTrojan ( 00598cb01 )
AlibabaTrojan:Win64/GRAPHITE.4d078cea
K7GWTrojan ( 00598cb01 )
VirITTrojan.Win64.Genus.BJS
CyrenW64/ABRisk.CNDR-9381
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win64/Agent.BQV
TrendMicro-HouseCallTrojan.Win64.GRAPHITE.YXCI3Z
KasperskyUDS:Trojan.Win32.GenericML.xnet
BitDefenderGen:Variant.Ulise.384314
NANO-AntivirusTrojan.Win64.Dwn.jtaray
MicroWorld-eScanGen:Variant.Ulise.384314
RisingBackdoor.Graphite!1.E060 (CLASSIC)
Ad-AwareGen:Variant.Ulise.384314
EmsisoftGen:Variant.Ulise.384314 (B)
ComodoMalware@#24dsxsxbk9tv5
ZillyaTrojan.Agent.Win64.19358
TrendMicroTrojan.Win64.GRAPHITE.YXCI3Z
McAfee-GW-EditionRDN/Agentb
FireEyeGeneric.mg.eb463a1b960168a1
SophosMal/Generic-S
IkarusTrojan.Win64.Agent
AviraTR/Agent.zisud
Antiy-AVLTrojan[Downloader]/Win64.Agentb
KingsoftWin32.Troj.Generic.jm.(kcloud)
MicrosoftTrojan:Win32/Woreflint.A!cl
ArcabitTrojan.Ulise.D5DD3A
ZoneAlarmUDS:Trojan.Win32.GenericML.xnet
GDataGen:Variant.Ulise.384314
GoogleDetected
AhnLab-V3Trojan/Win.DownLoader.R522815
ALYacTrojan.Agent.Wacatac
MAXmalware (ai score=100)
CylanceUnsafe
PandaTrj/Chgt.AD
TencentMalware.Win32.Gencirc.115d64bd
MaxSecureTrojan.Malware.185628869.susgen
FortinetW64/Agent.BQV!tr
AVGWin64:Malware-gen
AvastWin64:Malware-gen
AlibabaTrojan:Win64/GRAPHITE.14fde02a
BkavW32.Common.05F58FBE
CAT-QuickHealTrojan.Ghanarava.1719339932d1fbd6
CTXdll.trojan.graphite
ClamAVWin.Loader.Graphite-10013854-0
CrowdStrikewin/malicious_confidence_100% (W)
DeepInstinctMALICIOUS
F-SecureTrojan.TR/Agent.zisud
JiangminTrojan.GenericML.dhk
KingsoftWin32.Troj.Generic.jm
LionicTrojan.Win32.GenericML.4!c
MalwarebytesMalware.AI.3534738233
McAfeeDti!2D8F73C1F2E5
MicrosoftTrojan:Win32/Multiverze
Paloaltogeneric.ml
SangforTrojan.Win32.FancyBear.IOC
SkyhighBehavesLike.Win64.Infected.pt
TrellixENSArtemis!EB463A1B9601
VBA32Trojan.Downloader
VaristW64/ABRisk.CNDR-9381
XcitiumMalware@#24dsxsxbk9tv5
alibabacloudTrojan:Win/Multiverze.Gen
huorongTrojanDownloader/W64.Graphite.b

Process list

NameCommand line
<Ignored Process>
rundll32.exe"C:\2d8f73c1f2e5b803ad6716644361c20b51ba49fa79361ef0bc1ae3a735968459.exe.dll",#1
WerFault.exe-u -p 2072 -s 448
WerFault.exe-u -p 2072 -s 448
WerFault.exe-u -p 2072 -s 448