32a1af6ee4402c3925578c1e18b011b8ae16378c65e309d6fe0cca37cc2041bd.exe
Classification: Malicious
32a1af6ee4402c3925578c1e18b011b8ae16378c65e309d6fe0cca37cc2041bd.exe is a malicious file sample. Linked to Asyncrat malware. Detected by 58 antivirus engines.
Detection summary
- 58 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 2 contacted hosts
- 5 DNS requests
MITRE ATT&CK associations
Malware families: ASYNCRAT (S1087)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-06-12 20:45:03 | 2026-06-12 20:45:03 | malicious-activity | |
| Asyncrat | Triage | 2026-06-12 20:34:53 | 2026-06-12 20:34:53 | malicious-activity | S1087 AsyncRAT |
Tags
evasive new_domain rat suspicious asyncrat default defense_evasion discovery execution persistenceSample information
- Filenames
- 32a1af6ee4402c3925578c1e18b011b8ae16378c65e309d6fe0cca37cc2041bd.exe, 32a1af6ee4402c3925578c1e18b011b8ae16378c65e309d6fe0cca37cc2041bd.bin
- File type
- PE32 executable for MS Windows 4.00 (GUI), Intel i ...
- MD5
2ada08e4076404f36fd93e15a8de342b- SHA-1
3ac0b372096efb4459fae5a34fefa6b99e353fe8- SHA-256
32a1af6ee4402c3925578c1e18b011b8ae16378c65e309d6fe0cca37cc2041bd- First indexed
- 2026-06-12 20:34:53
- Last updated
- 2026-09-02 13:45:09
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Generic.AsyncRAT.Marte.B.CBF98CEF |
| APEX | Malicious |
| AVG | MSIL:AsyncRat-E [Pws] |
| AhnLab-V3 | Malware/Win32.RL_Generic.C3558490 |
| Alibaba | Backdoor:MSIL/AsyncRat.2ec915a8 |
| Antiy-AVL | Trojan[Backdoor]/MSIL.Crysan |
| Arcabit | Generic.AsyncRAT.Marte.B.CBF98CEF |
| Avast | MSIL:AsyncRat-E [Pws] |
| Avira | TR/Dropper.Gen |
| BitDefender | Generic.AsyncRAT.Marte.B.CBF98CEF |
| Bkav | W32.Malware.763B6742 |
| CAT-QuickHeal | Trojan.IgenericFC.S14890850 |
| CTX | exe.unknown.asyncrat |
| ClamAV | Win.Packed.Razy-9625918-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Siggen9.56514 |
| ESET-NOD32 | MSIL/AsyncRAT.A trojan |
| Elastic | Windows.Generic.Threat |
| Emsisoft | Generic.AsyncRAT.Marte.B.CBF98CEF (B) |
| F-Secure | Trojan.TR/Dropper.Gen |
| Fortinet | MSIL/AsyncRAT.A!tr |
| GData | MSIL.Backdoor.DCRat.D |
| Detected | |
| Jiangmin | Backdoor.MSIL.gguk |
| K7AntiVirus | Trojan ( 005c228f1 ) |
| K7GW | Trojan ( 005c228f1 ) |
| Kaspersky | HEUR:Backdoor.MSIL.Crysan.gen |
| Kingsoft | malware.kb.c.1000 |
| Malwarebytes | Generic.Trojan.MSIL.DDS |
| MaxSecure | Trojan.Malware.300983.susgen |
| McAfeeD | Trojan:Win/Generic.BCX |
| MicroWorld-eScan | Generic.AsyncRAT.Marte.B.CBF98CEF |
| Microsoft | Backdoor:MSIL/AsyncRat!atmn |
| NANO-Antivirus | Trojan.Win32.AsyncRAT.lhhviy |
| Paloalto | generic.ml |
| Panda | Trj/GdSda.A |
| Rising | Trojan.AntiVM!1.CF63 (CLASSIC) |
| SUPERAntiSpyware | Trojan.Agent/Gen-Kryptik |
| Sangfor | Suspicious.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | Fareit-FZT!2ADA08E40764 |
| Sophos | Troj/AsyncRat-B |
| Symantec | Backdoor.ASync!g2 |
| Tencent | Trojan.Msil.Agent.zap |
| Trapmine | suspicious.low.ml.score |
| TrellixENS | Fareit-FZT!2ADA08E40764 |
| TrendMicro | Backdoor.MSIL.ASYNCRAT.SMXSR |
| TrendMicro-HouseCall | Backdoor.MSIL.ASYNCRAT.SMXSR |
| VBA32 | OScope.Backdoor.MSIL.Crysan |
| VIPRE | Generic.AsyncRAT.Marte.B.CBF98CEF |
| Varist | W32/Samas.B.gen!Eldorado |
| VirIT | Trojan.Win32.MSIL_Heur.A |
| Zillya | Backdoor.Crysan.Win32.4146 |
| ZoneAlarm | Troj/AsyncRat-B |
| alibabacloud | Rat:Win/AsyncRAT.Stub |
| huorong | Backdoor/MSIL.DcRat.a |
Network contacts
DNS requests
gozi.sexviet24.net melissa.sexviet24.net remcos.sexviet24.net sexviet24.net www.sexviet24.net