e.exe

Classification: Malicious

e.exe is a backdoor (Windows 64-bit executable). Detected by 47 antivirus engines. Reported by Hybrid-Analysis and Triage, last seen 2026-10-18.

Detection summary

  • 47 antivirus detections
  • 21 IDS alerts
  • 0 processes observed
  • 4 contacted hosts
  • 12 DNS requests

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-10-18 04:45:04 2026-10-18 04:45:04 malicious-activity
Remcos Triage 2026-10-18 04:36:35 2026-10-18 04:36:35 malicious-activity

Tags

malicious new_domain remcos remotehost discovery persistence rat suricata

Sample information

Filenames
e.exe
File type
PE32+ executable for MS Windows 5.02 (GUI), x86-64 ...
MD5
2a24eedd1e39e5bc5721f16596a2f52a
SHA-1
b4430c41b96a28ff89d59609e47f28e3069d5a07
SHA-256
3f23e90a14d9238edd2327f1e3c8aec65b741f827cf338658aa435ff56f002d7
First indexed
2026-10-18 04:36:35
Last updated
2026-10-18 04:55:42

Antivirus detections

EngineDetection
ALYacGeneric.Remcos.2554A7A0
APEXMalicious
AVGWin64:MalwareX-gen [Rat]
AhnLab-V3Backdoor/Win.Remcos.R773767
Antiy-AVLTrojan[Backdoor]/Win32.Remcos
ArcabitGeneric.Remcos.2554A7A0
AvastWin64:MalwareX-gen [Rat]
AviraTR/W64.MalwareX
BitDefenderGeneric.Remcos.2554A7A0
BkavW32.Malware.6D52D1F5
CTXexe.unknown.remcos
CrowdStrikewin/malicious_confidence_90% (D)
CylanceUnsafe
CynetMalicious (score: 100)
DrWebBackDoor.Remcos.729
ESET-NOD32Win64/Rescoms.B trojan
ElasticWindows.Trojan.Remcos
EmsisoftGeneric.Remcos.2554A7A0 (B)
F-SecureTrojan.TR/W64.MalwareX
FortinetW64/Remcos.B!tr
GDataGeneric.Remcos.2554A7A0
GoogleDetected
GridinsoftBackdoor.Win64.Remcos.oa!s1
IkarusBackdoor.Win64.Remcos
K7AntiVirusBackdoor ( 005d11a21 )
K7GWBackdoor ( 005d11a21 )
KasperskyHEUR:Trojan.Win64.Generic
Kingsoftmalware.kb.a.967
MalwarebytesRemcos.Backdoor.Bot.DDS
MaxSecureTrojan.Malware.300983.susgen
McAfeeDti!3F23E90A14D9
MicroWorld-eScanGeneric.Remcos.2554A7A0
MicrosoftBackdoor:Win32/Remcos.GA!MTB
RisingBackdoor.Remcos!1.BAC7 (CLASSIC)
SUPERAntiSpywareBackdoor.Bot/Variant
SangforTrojan.Win32.Save.a
SentinelOneStatic AI - Malicious PE
SophosTroj/Remcos-AST
SymantecBackdoor.Remcos!gen9
TencentTrojan.Win32.Remcos.16001234
VIPREGeneric.Remcos.2554A7A0
VaristW64/Agent.MFA.gen!Eldorado
VirITTrojan.Win64.GenusT.FXPQ
YandexBackdoor.Remcos!ZdiHE+H/5ec
ZillyaBackdoor.Remcos.Win32.9105
ZoneAlarmTroj/Remcos-AST
huorongBackdoor/Remcos.k

Network contacts

172.67.219.27 104.21.49.147 104.21.21.204 104.21.75.136

DNS requests

backdoor.qh88b3.com backdoor.qh88eu.com backdoor.qq88.fan backdoor.rajaslot5000.cc c2.qh88eu.com c2.qq88.fan qh88b3.com qh88eu.com qq88.fan rajaslot5000.cc www.qh88b3.com www.rajaslot5000.cc