2026-08-20_69f100f18c6565f372f27fbef51d7b98_amadey_cloudeye_coinminer_dragonforce_elex_emotet_glassworm_hacktools_icedid_mimikatz_qilin_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_wannacry
Classification: Malicious
2026-08-20_69f100f18c6565f372f27fbef51d7b98_amadey_cloudeye_coinminer_dragonforce_elex_emotet_glassworm_hacktools_icedid_mimikatz_qilin_redline-stealer_remco…
Detection summary
- 59 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: MIMIKATZ (S0002)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mimikatz | Triage | 2026-08-20 05:50:56 | 2026-08-20 05:50:56 | malicious-activity | S0002 Mimikatz |
Tags
mimikatz xmrig credential_access defense_evasion discovery execution installer miner persistence privilege_escalation upxSample information
- Filenames
- 2026-08-20_69f100f18c6565f372f27fbef51d7b98_amadey_cloudeye_coinminer_dragonforce_elex_emotet_glassworm_hacktools_icedid_mimikatz_qilin_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_wannacry
- SHA-256
420301f3bbe00a77d556bd4c07b0eec1ed3e6aebc032820a63e526a3084a237c- First indexed
- 2026-08-20 05:50:56
- Last updated
- 2026-10-07 01:57:49
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Gen:Variant.Application.Barys.68909 |
| APEX | Malicious |
| AVG | Win32:Malware-gen |
| Acronis | suspicious |
| AhnLab-V3 | Trojan/Win32.EquationDrug.C3319046 |
| Alibaba | Trojan:Win32/hognoob.89 |
| Antiy-AVL | Trojan[Miner]/Win32.CoinMiner |
| Arcabit | Trojan.Application.Barys.D10D2D |
| Avast | Win32:Malware-gen |
| Avira | DR/W32.MalwareX |
| BitDefender | Gen:Variant.Application.Barys.68909 |
| CAT-QuickHeal | Trojanpws.Qqpass.16543 |
| CTX | exe.unknown.barys |
| ClamAV | Win.Dropper.Gh0stRAT-6989861-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.StartPage1.58196 |
| ESET-NOD32 | Win32/CoinMiner.BUJ trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Variant.Application.Barys.68909 (B) |
| F-Secure | Dropper.DR/W32.MalwareX |
| Fortinet | W32/CoinMiner.PHP!tr |
| GData | Win32.Riskware.PSE.1TYMTF4 |
| Detected | |
| Gridinsoft | Trojan.Win32.CoinMiner.vb!s3 |
| Jiangmin | Exploit.MS17-010.cg |
| K7AntiVirus | CryptoMiner ( 005456291 ) |
| K7GW | CryptoMiner ( 005456291 ) |
| Kaspersky | HEUR:Trojan.Win32.EquationDrug.gen |
| Lionic | Trojan.Win32.Generic.lx0C |
| Malwarebytes | Trojan.EquationDrug |
| MaxSecure | Trojan.Malware.682854405.susgen |
| McAfeeD | Real Protect-LS!69F100F18C65 |
| MicroWorld-eScan | Gen:Variant.Application.Barys.68909 |
| Microsoft | Trojan:Win32/Skeeyah.A!MTB |
| NANO-Antivirus | Trojan.Win32.StartPage1.glchdd |
| Paloalto | generic.ml |
| Panda | Trj/Genetic.gen |
| Rising | Downloader.Agent!1.B837 (CLASSIC) |
| Sangfor | Trojan.Win32.Save.ShadowBrokersB |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win32.Generic.th |
| Sophos | Troj/Agent-BCFD |
| Symantec | ML.Attribute.HighConfidence |
| Tencent | Trojan.Win32.Coinminer.16000308 |
| TrellixENS | GenericRXHV-KH!69F100F18C65 |
| TrendMicro-HouseCall | Trojan.Win32.VSX.PE04CA5 |
| VBA32 | Trojan.Reconyc |
| VIPRE | Gen:Variant.Application.Barys.68909 |
| Varist | W32/Trojan.FSVX-3081 |
| VirIT | Trojan.Win32.StartPage1.DICI |
| Webroot | W32.Trojan.Tr.Coinminer.Pqfde |
| Xcitium | TrojWare.Win32.CoinMiner.VA@8bdt5z |
| Yandex | Trojan.GenAsa!4o4ccnD88q0 |
| ZoneAlarm | Troj/Agent-BCFD |
| alibabacloud | HackTool:Win/Mimikatz.c4dfeb9f |
| huorong | Trojan/Agent.bax |