2026-10-10_4f943886fe5b704e5087a27968ad6eb0_amadey_elex_ramnit_redline-stealer_rhadamanthys_smoke-loader_stop
Classification: Malicious
2026-10-10_4f943886fe5b704e5087a27968ad6eb0_amadey_elex_ramnit_redline-stealer_rhadamanthys_smoke-loader_stop is a virus. Detected by 63 antivirus engines.
Detection summary
- 63 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Generic Malware |
Cyber Threat Alliance |
2026-10-15 12:23:20 |
2026-10-17 15:48:39 |
malicious-activity
|
|
| Sality |
Triage |
2026-10-11 14:23:19 |
2026-10-11 14:23:19 |
malicious-activity
|
|
Tags
sality
backdoor
defense_evasion
discovery
trojan
upx
Sample information
- Filenames
- 2026-10-10_4f943886fe5b704e5087a27968ad6eb0_amadey_elex_ramnit_redline-stealer_rhadamanthys_smoke-loader_stop
- MD5
4f943886fe5b704e5087a27968ad6eb0- SHA-1
d84d2454bd973f19d2e5578be8b36fe2134d267a- SHA-256
3598759578d86dc2e91be85b49406f57f987fe04b51a627e7e10176187016095- First indexed
- 2026-10-11 14:23:19
- Last updated
- 2026-10-11 14:23:19
Antivirus detections
| Engine | Detection |
|---|
| APEX | Malicious |
| AVG | Win32:SaliCode [Inf] |
| Acronis | suspicious |
| AhnLab-V3 | Win32/Kashu.E |
| Antiy-AVL | Trojan/Win32.Hesv |
| Arcabit | Win32.Sality.3 |
| Avast | Win32:SaliCode [Inf] |
| Avira | W32/Sality.AT |
| BitDefender | Win32.Sality.3 |
| Bkav | W32.Sality.PE |
| CAT-QuickHeal | W32.Sality.U |
| CTX | exe.unknown.sality |
| ClamAV | Win.Malware.Agentb-9784486-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Win32.Sector.30 |
| ESET-NOD32 | Win32/Sality.NBA virus |
| Elastic | malicious (high confidence) |
| Emsisoft | Trojan.Backdoor (A) |
| F-Secure | Malware.W32/Sality.AT |
| Fortinet | W32/Agent.NPS!worm |
| GData | Win32.Virus.Ramnit.I@dam |
| Google | Detected |
| Gridinsoft | Worm.Win32.Mira.ka!i |
| Ikarus | Trojan-Downloader.Win32.Imwee |
| Jiangmin | Win32/HLLP.Kuku.poly2 |
| K7AntiVirus | Virus ( f10001071 ) |
| K7GW | Virus ( f10001071 ) |
| Kaspersky | Virus.Win32.Sality.sil |
| Kingsoft | malware.kb.a.999 |
| Malwarebytes | Malware.AI.3116844207 |
| MaxSecure | Virus.Sality.BH |
| McAfeeD | Real Protect-LS!4F943886FE5B |
| MicroWorld-eScan | Win32.Sality.3 |
| Microsoft | Virus:Win32/Ramnit.A!remnants |
| NANO-Antivirus | Trojan.Win32.Zusy.fjmqyz |
| Panda | W32/Sality.AA |
| Rising | Virus.Sality!1.A5BD (CLASSIC) |
| SUPERAntiSpyware | Trojan.Agent/Generic |
| Sangfor | Trojan.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win32.Sality.dc |
| Sophos | W32/Patched-I |
| Symantec | W32.Sality.AE |
| TACHYON | Virus/W32.Sality.D |
| Tencent | Trojan.Win32.Agentb.xc |
| Trapmine | malicious.high.ml.score |
| TrellixENS | W32/Sality.gen.z |
| TrendMicro | PE_SALITY.ER |
| TrendMicro-HouseCall | PE_SALITY.ER |
| VBA32 | Virus.Win32.Sality.bakb |
| VIPRE | Win32.Sality.3 |
| Varist | W32/S-46dd8f53!Eldorado |
| ViRobot | Win32.Sality.Gen.A |
| VirIT | Win32.Sality.BI |
| Xcitium | Virus.Win32.Ramnit.OV@3uwchz |
| Yandex | Trojan.GenAsa!cQQY1F1vTAU |
| Zillya | Virus.Sality.Win32.25 |
| ZoneAlarm | W32/Patched-I |
| alibabacloud | Virus:Win/Sality.NBA(dyn) |
| huorong | Worm/Agent.bx |