66lottery.exe
Classification: Malicious
66lottery.exe is a malicious file sample (Windows 64-bit executable). Linked to Remcos, Crossrat malware. Reported by 4 threat sources, last seen 2026-06-22.
Detection summary
- 0 antivirus detections
- 21 IDS alerts
- 0 processes observed
- 1 contacted hosts
- 1 DNS requests
MITRE ATT&CK associations
Malware families: REMCOS (S0332) CROSSRAT (S0235)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| CrossRAT | ThreatFox Abuse.ch | 2026-06-22 16:28:31 | 2026-06-22 16:56:32 | S0235 CrossRAT | |
| Generic Malware | Hybrid-Analysis | 2026-06-22 16:45:04 | 2026-06-22 16:45:04 | malicious-activity | |
| Remcos | Triage | 2026-06-22 16:18:36 | 2026-06-22 16:18:36 | malicious-activity | S0332 Remcos |
| RemcosRAT | MalwareBazaar Abuse.ch | 2026-06-22 16:11:03 | 2026-06-22 16:11:03 | malicious-activity | S0332 Remcos |
Tags
remcos remotehost rat jar.crossrat truptoSample information
- Filenames
- 66lottery.exe, 3832eea5221afb6554def361abd9abed7258c0916fc34ecbd19191131f462fba.bin
- File type
- PE32+ executable for MS Windows 5.02 (GUI), x86-64 ...
- MD5
1277177e9e12414f50182a8bb5463a7a- SHA-1
41b27584362b4fff75ab23fb0caa2968609fd570- SHA-256
3832eea5221afb6554def361abd9abed7258c0916fc34ecbd19191131f462fba- First indexed
- 2026-06-22 16:11:03
- Last updated
- 2026-09-10 17:39:32