2026-03-11_2e66032a4e210288dd4c7e2d61e35258_agent-tesla_amadey_darkgate_elex_glassworm_hawkeye_icedid_maze_njrat_remcos
Classification: Malicious
2026-03-11_2e66032a4e210288dd4c7e2d61e35258_agent-tesla_amadey_darkgate_elex_glassworm_hawkeye_icedid_maze_njrat_remcos is a trojan.
Detection summary
- 50 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: REVENGE RAT (S0379)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Revengerat | Triage | 2026-03-11 16:19:42 | 2026-03-11 16:19:42 | malicious-activity | S0379 Revenge RAT |
Tags
revengerat marzo26 discovery trojanSample information
- Filenames
- 2026-03-11_2e66032a4e210288dd4c7e2d61e35258_agent-tesla_amadey_darkgate_elex_glassworm_hawkeye_icedid_maze_njrat_remcos
- MD5
2e66032a4e210288dd4c7e2d61e35258- SHA-1
af8f0af397b54d1be1ebe2b7c72fb392d37cfb81- SHA-256
40ed8483afa4688f03be60eb3cb1cfd610ed04a7d3bad82fe6261dc8e70da210- SHA-512
71a9ac3c2c0eb95e079ae4e3c53df5d3a835a75e2d9c0426f04b6bef7f37bbb9e126f470e248a29e6ce7da224aa0810024c953222c06348b33c2f043fff90a54- First indexed
- 2026-03-11 16:19:42
- Last updated
- 2026-10-14 00:44:58
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | GT:AIT.Acapulco.11.2D269CBA |
| APEX | Malicious |
| AVG | AutoIt:Injector-JF [Trj] |
| Antiy-AVL | Trojan[Injector]/Win32.Autoit |
| Arcabit | GT:AIT.Acapulco.11.2D269CBA [many] |
| Avast | AutoIt:Injector-JF [Trj] |
| Avira | DR/AutoIt.Gen8 |
| BitDefender | GT:AIT.Acapulco.11.2D269CBA |
| Bkav | W32.AIDetectMalware |
| CTX | exe.trojan.autoit |
| ClamAV | Win.Trojan.Autoit-10025536-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.AutoIt.385 |
| ESET-NOD32 | Win32/Injector.Autoit.DUY trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | GT:AIT.Acapulco.11.2D269CBA (B) |
| F-Secure | Dropper.DR/AutoIt.Gen8 |
| Fortinet | AutoIt/Injector.DUY!tr |
| GData | GT:AIT.Acapulco.11.2D269CBA |
| Detected | |
| Gridinsoft | Trojan.Heur!.02016021 |
| Ikarus | Trojan.Autoit |
| K7AntiVirus | Trojan ( 700000111 ) |
| K7GW | Trojan ( 700000111 ) |
| Kaspersky | HEUR:Trojan.Win32.Generic |
| Lionic | Trojan.Win32.AutoIt.4!c |
| Malwarebytes | Neshta.Virus.FileInfector.DDS |
| McAfeeD | Trojan:Win/SuspiciousAutoit.A |
| MicroWorld-eScan | GT:AIT.Acapulco.11.2D269CBA |
| Microsoft | Trojan:Win32/Wacatac.B!ml |
| NANO-Antivirus | Trojan.Script.Agent.jpixbz |
| Paloalto | generic.ml |
| Panda | Trj/CI.A |
| Rising | Trojan.Injector!8.C4 (CLOUD) |
| Sangfor | Virus.Win32.Save.a |
| Skyhigh | BehavesLike.Win32.Injector.wc |
| Sophos | Troj/AutoIt-CPM |
| Tencent | Trojan.Win32.Autoit.404624 |
| Trapmine | suspicious.low.ml.score |
| TrellixENS | Artemis!2E66032A4E21 |
| TrendMicro | Trojan.AutoIt.CRYPTINJECT.SMA |
| TrendMicro-HouseCall | Trojan.Win32.VSX.PE04C9z |
| VIPRE | GT:AIT.Acapulco.11.2D269CBA |
| Varist | AUI/Agent.V |
| VirIT | Trojan.Win32.AutoIt_Heur.C |
| ZoneAlarm | Mal/AuItInj-A |
| alibabacloud | Trojan[dropper]:Win/Nanocore.NA8PHU |