shimmer.exe
Classification: Malicious
shimmer.exe is a malicious file sample. Reported by 2 threat sources, last seen 2026-09-02. IoC context and downloadable threat intel on Maltiverse.
Detection summary
- 0 antivirus detections
- 2 IDS alerts
- 0 processes observed
- 7 contacted hosts
- 5 DNS requests
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-09-02 11:45:05 | 2026-09-02 11:45:05 | malicious-activity | |
| Suspicious Sample | Triage | 2026-08-26 13:35:03 | 2026-08-26 13:35:03 | anomalous-activity |
Tags
defense_evasion discovery spyware trojan evasive malicious new_domain windows-server-utilitySample information
- Filenames
- shimmer.exe, 2026-08-25_ae012260df7865636d3af65570822c0d_coinminer_dosia_glassworm_poet-rat_quasar-rat_sliver_snatch_zxxz
- File type
- PE32+ executable for MS Windows 6.01 (GUI), x86-64 ...
- MD5
ae012260df7865636d3af65570822c0d- SHA-1
a052b9a1f9035758c6b2ea58fd0a8527ac63f127- SHA-256
30c469dd2124aedcd75703735cd3fa173dbeedfe6c5491abda1fd852586bf0b1- First indexed
- 2026-08-26 13:35:03
- Last updated
- 2026-09-02 11:45:05
Network contacts
1.1.1.1 9.9.9.10 194.242.2.2 76.76.2.0 109.235.50.145 20.50.201.205 2606:1a40::
DNS requests
api01.nano-kotleta.click cloudflare-dns.com dns.mullvad.net dns10.quad9.net p0.freedns.controld.com