register.exe
Classification: Malicious
register.exe is a trojan (Windows executable). Detected by 48 antivirus engines. Linked to Asyncrat, Shimrat malware. 9 sightings, last seen 2026-10-16.
Detection summary
- 48 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: ASYNCRAT (S1087) SHIMRAT (S0444)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Shim RAT | ThreatFox Abuse.ch | 2026-10-15 18:36:21 | 2026-10-16 11:25:39 | malicious-activity | S0444 ShimRat |
| Milleniumrat | Triage | 2026-10-14 19:42:16 | 2026-10-14 20:02:21 | malicious-activity | |
| MilleniumRAT | MalwareBazaar Abuse.ch | 2026-10-14 20:01:54 | 2026-10-14 20:01:54 | malicious-activity | |
| Generic Malware | Hybrid-Analysis | 2026-04-29 23:45:04 | 2026-04-30 01:45:05 | ||
| Asyncrat | Triage | 2026-04-29 23:00:50 | 2026-04-29 23:00:50 | malicious-activity | S1087 AsyncRAT |
Tags
asyncrat milleniumrat quasar stormkitty venomrat jgc credential_access defense_evasion discovery execution persistence rat rootkit spyware stealer trojan network privilege_escalation win.shimratSample information
- Filenames
- register.exe, crack.exe
- File type
- PE32 executable for MS Windows 6.00 (GUI), Intel i ...
- MD5
7f47a50117bac7569e6b4de42926636e- SHA-1
877622dda7d578058ebdddbb8be578c68dae74d9- SHA-256
3b35d3233e08d7c7a43a0bc0a899ce14cd6797949e96af0c6b3c32f690ab4815- First indexed
- 2026-04-29 22:58:19
- Last updated
- 2026-10-16 11:25:50
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | IL:Trojan.MSILZilla.246312 |
| APEX | Malicious |
| AVG | MalwareX-gen [Pws] |
| Alibaba | TrojanDownloader:MSIL/Upatre.fe861a3b |
| Antiy-AVL | Trojan/MSIL.GenKryptik |
| Arcabit | IL:Trojan.MSILZilla.D3C228 |
| Avast | MalwareX-gen [Pws] |
| BitDefender | IL:Trojan.MSILZilla.246312 |
| Bkav | W32.AIDetectMalware.CS |
| CTX | exe.trojan.msil |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.PackedNET.3495 |
| ESET-NOD32 | MSIL/Kryptik_AGen.EMO trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | IL:Trojan.MSILZilla.246312 (B) |
| Fortinet | MSIL/Kryptik_AGen.EMO!tr |
| GData | IL:Trojan.MSILZilla.246312 |
| Detected | |
| Gridinsoft | Trojan.Win32.Packed.sa |
| Ikarus | Trojan.MSIL.Crypt |
| K7AntiVirus | Trojan-Downloader ( 006de1221 ) |
| K7GW | Trojan-Downloader ( 006de1221 ) |
| Kaspersky | HEUR:Trojan-Downloader.MSIL.Upatre.gen |
| Kingsoft | MSIL.Trojan-Downloader.Upatre.gen |
| Lionic | Trojan.Win32.Upatre.1j!c |
| Malwarebytes | Malware.AI.4138725351 |
| MaxSecure | Trojan.Malware.345032243.susgen |
| McAfeeD | Trojan:Win/GenericPack.BMP |
| MicroWorld-eScan | IL:Trojan.MSILZilla.246312 |
| Microsoft | Trojan:Win32/Kepavll!rfn |
| Paloalto | generic.ml |
| Rising | Malware.Obfus/[email protected] (RDM.MSIL2:UVYG3vjCWFufkpfuuAh26w) |
| Sangfor | Downloader.Msil.Upatre.Vq9z |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | Artemis!Trojan |
| Sophos | Troj/Krypt-AQM |
| Tencent | Msil.Trojan-Downloader.Upatre.Ogil |
| TrellixENS | Artemis!7F47A50117BA |
| TrendMicro-HouseCall | Trojan.Win32.VSX.PE04C9z |
| VBA32 | TScope.Trojan.MSIL |
| VIPRE | IL:Trojan.MSILZilla.246312 |
| Varist | W32/ABTrojan.ANCE-2137 |
| VirIT | Trojan.Win32.MSIL_Heur.A |
| Zillya | Trojan.KryptikAGen.Win32.300792 |
| ZoneAlarm | Troj/Krypt-AQM |
| alibabacloud | Trojan[downloader]:MSIL/Upatre.gyf |