32f3c111d799b174292e15e4d84f7a07676a999769d20905403ea7c0ba04df2e.exe

Classification: Malicious

32f3c111d799b174292e15e4d84f7a07676a999769d20905403ea7c0ba04df2e.exe is a malicious file sample. Linked to Cobalt Strike malware.

Detection summary

  • 59 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 2 contacted hosts
  • 1 DNS requests

MITRE ATT&CK associations

Malware families: COBALT STRIKE (S0154)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-05-29 04:45:04 2026-05-29 04:45:04
Cobalt Strike Triage 2026-05-29 04:24:45 2026-05-29 04:24:45 malicious-activity S0154 Cobalt Strike

Tags

malicious cobaltstrike backdoor trojan

Sample information

Filenames
32f3c111d799b174292e15e4d84f7a07676a999769d20905403ea7c0ba04df2e.exe, 32f3c111d799b174292e15e4d84f7a07676a999769d20905403ea7c0ba04df2e.bin
File type
PE32+ executable for MS Windows 5.02 (GUI), x86-64 ...
MD5
5459bcea06fd2b946c61069b25663fef
SHA-1
6fea2ee0d479cd8902e8c163a3eee7d2e26fc3ab
SHA-256
32f3c111d799b174292e15e4d84f7a07676a999769d20905403ea7c0ba04df2e
First indexed
2026-05-29 04:24:45
Last updated
2026-09-02 11:48:20

Antivirus detections

EngineDetection
ALYacGen:Variant.Application.Mikey.108320
AVGWin64:Evo-gen [Trj]
AhnLab-V3Trojan/Win.Generic.C4447468
AlibabaTrojan:Win64/Shelma.43a0f6f7
Antiy-AVLTrojan/Win64.Shelma
ArcabitTrojan.Application.Mikey.D1A720
AvastWin64:Evo-gen [Trj]
AviraTR/W64.Evo
BitDefenderGen:Variant.Application.Mikey.108320
BkavW32.Malware.2C1BEEC2
CAT-QuickHealTrojan.Win64RI.S20968137
CTXexe.trojan.shelma
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
CynetMalicious (score: 99)
DeepInstinctMALICIOUS
DrWebTrojan.MulDrop17.54984
ESET-NOD32Win64/Rozena_AGen.BO trojan
Elasticmalicious (high confidence)
EmsisoftGen:Variant.Application.Mikey.108320 (B)
F-SecureTrojan.TR/W64.Evo
FortinetW64/Agent.CE99!tr
GDataGen:Variant.Application.Mikey.108320
GoogleDetected
GridinsoftTrojan.Win64.Wacatac.oa!s1
IkarusTrojan.Win64.Rozena
JiangminTrojan.Shelma.hys
K7AntiVirusTrojan ( 006dab901 )
K7GWTrojan ( 006dab901 )
KasperskyTrojan.Win64.Shelma.jxt
KingsoftWin32.Trojan.Generic.a
LionicTrojan.Win64.Shelma.tt31
MalwarebytesTrojan.CobaltStrike
MaxSecureTrojan.Malware.665969103.susgen
McAfeeDTrojan:Win/Cobaltstrike.VYU
MicroWorld-eScanGen:Variant.Application.Mikey.108320
MicrosoftTrojan:Win64/CobaltStrike.CG!MTB
Paloaltogeneric.ml
PandaTrj/GdSda.A
RisingTrojan.Shelma!8.1A3D (TFE:5:Mw4doJkweT)
SUPERAntiSpywareTrojan.Agent/Gen-Shelma
SangforTrojan.Win32.Save.a
SentinelOneStatic AI - Suspicious PE
SophosTroj/Cobalt-KM
TencentTrojan.Win64.Rozena.16002570
Trapminemalicious.moderate.ml.score
TrendMicroBackdoor.Win64.COBEACON.YXGETZ
TrendMicro-HouseCallBackdoor.Win64.COBEACON.YXGETZ
VBA32Trojan.Win64.Shelma
VIPREGen:Variant.Application.Mikey.108320
VaristW64/ARisk.BA
ViRobotTrojan.Win.Z.Shelma.364544.FYE
VirITTrojan.Win64.Genus.JAY
WebrootW32.Malware.Gen
YandexTrojan.Shelma!Se62mB7Pb2E
ZillyaTrojan.Shelma.Win64.5223
ZoneAlarmTroj/Cobalt-KM
alibabacloudTrojan:Win/Rozena_AGen.592fd585
huorongHVM:Backdoor/Mikey.a

Network contacts

13.248.169.48 76.223.54.146

DNS requests

webcdns.com