40079f05ba7cdccac1f62f8e7e1b644bc0a806b58465f5c005725bc54ee73ef1.exe

Classification: Malicious

40079f05ba7cdccac1f62f8e7e1b644bc0a806b58465f5c005725bc54ee73ef1.exe is a malicious file sample. Linked to Crossrat, Remcos malware.

Detection summary

  • 0 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 1 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: CROSSRAT (S0235) REMCOS (S0332)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Cyber Threat Alliance 2026-08-09 10:06:17 2026-08-09 10:06:17 malicious-activity
Remcos Triage 2026-06-27 09:22:10 2026-07-21 22:14:34 malicious-activity S0332 Remcos
CrossRAT ThreatFox Abuse.ch 2026-06-29 01:23:42 2026-06-29 01:25:04 S0235 CrossRAT
Generic Malware Hybrid-Analysis 2026-06-27 09:45:03 2026-06-27 09:45:03 malicious-activity
RemcosRAT MalwareBazaar Abuse.ch 2026-06-27 09:18:30 2026-06-27 09:18:30 malicious-activity

Tags

remcos hmu discovery rat jar.crossrat trupto

Sample information

Filenames
40079f05ba7cdccac1f62f8e7e1b644bc0a806b58465f5c005725bc54ee73ef1.exe, 07_remcos_agent_7.1.0.bin, 07_remcos_agent_7.1.0.bin.exe, 40079f05ba7cdccac1f62f8e7e1b644bc0a806b58465f5c005725bc54ee73ef1.bin
File type
PE32 executable for MS Windows 5.01 (GUI), Intel i ...
MD5
496caac1fa6369e93cb48970f72e26da
SHA-1
bd2a22a6bab8f5d5c146f6162ad28244ab22985b
SHA-256
40079f05ba7cdccac1f62f8e7e1b644bc0a806b58465f5c005725bc54ee73ef1
First indexed
2026-06-27 09:18:30
Last updated
2026-08-01 00:08:10

Network contacts

144.31.236.240