RFQ678903423_PROD_INQHASUE_de_mexico.exe
Classification: Malicious
RFQ678903423_PROD_INQHASUE_de_mexico.exe is a malicious file sample. Linked to Ecipekac malware. Reported by 2 threat sources, last seen 2024-05-16.
Detection summary
- 58 antivirus detections
- 0 IDS alerts
- 1 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| SigLoader |
ThreatFox Abuse.ch |
2024-05-14 17:19:03 |
2024-05-16 17:25:53 |
|
S0624 Ecipekac
|
| Generic Malware |
Hybrid-Analysis |
2024-05-10 21:29:49 |
2024-05-10 22:30:09 |
|
|
Sample information
- Filenames
- RFQ678903423_PROD_INQHASUE_de_mexico.exe
- File type
- PE32 executable (GUI) Intel 80386, for MS Windows, ...
- Size
- 418763 bytes
- MD5
e42f23139213daac41b211dfe7e1061e- SHA-1
46ce0d34ca8bda9891de099a895fe02b07dc0214- SHA-256
422e9bb54dde7e8664eef1f1e4c132beed0a0499587db423de19a3981ae53004- First indexed
- 2024-05-10 21:11:44
- Last updated
- 2026-08-22 03:16:28
Antivirus detections
| Engine | Detection |
|---|
| ALYac | Gen:Variant.Ransom.Loki.1608 |
| APEX | Malicious |
| AVG | Win32:Malware-gen |
| Antiy-AVL | Trojan/Generic.ASMalwNS.F48D7 |
| Arcabit | Trojan.Generic.D4554C6C |
| Avast | Win32:Malware-gen |
| BitDefender | Trojan.GenericKD.72698988 |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| ESET-NOD32 | NSIS/Injector.ASH |
| Elastic | malicious (high confidence) |
| Emsisoft | Trojan.GenericKD.72698988 (B) |
| FireEye | Generic.mg.e42f23139213daac |
| GData | Trojan.GenericKD.72698988 |
| Google | Detected |
| Kaspersky | HEUR:Trojan.Win32.Makoob.gen |
| MAX | malware (ai score=88) |
| MicroWorld-eScan | Trojan.GenericKD.72698988 |
| Microsoft | Trojan:Win32/GuLoader.KUYE!MTB |
| Paloalto | generic.ml |
| SentinelOne | Static AI - Suspicious PE |
| Sophos | Generic ML PUA (PUA) |
| TrendMicro-HouseCall | TROJ_GEN.F0D1C00E924 |
| VIPRE | Trojan.GenericKD.72698988 |
| Varist | W32/Injector.AUUY-8722 |
| ZoneAlarm | HEUR:Trojan.Win32.Makoob.gen |
| ALYac | Trojan.GenericKD.72698988 |
| AhnLab-V3 | Downloader/Win.GuLoader.C5622419 |
| Alibaba | Trojan:Win32/GuLoader.ab842deb |
| Antiy-AVL | Trojan/Win32.Makoob.gen |
| Avira | TR/W32.Malware |
| CTX | exe.trojan.makoob |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| ESET-NOD32 | NSIS/Injector.ASH trojan |
| F-Secure | Trojan.TR/W32.Malware |
| Fortinet | NSIS/Injector.C7R0!tr |
| K7AntiVirus | Trojan ( 005ce14e1 ) |
| K7GW | Trojan ( 005ce14e1 ) |
| Kingsoft | Win32.Trojan.Makoob.gen |
| Lionic | Trojan.Win32.Makoob.4!c |
| MaxSecure | Trojan.Malware.698398649.susgen |
| McAfeeD | ti!422E9BB54DDE |
| Panda | Trj/CI.A |
| Rising | Trojan.Injector/NSIS!8.1294D (CLOUD) |
| Sangfor | Trojan.Win32.Injector.Vvym |
| Sophos | Mal/Generic-S |
| Symantec | Scr.NSISHeur!gen3 |
| Tencent | Win32.Trojan.Makoob.Wmhl |
| TrellixENS | Artemis!E42F23139213 |
| TrendMicro | Trojan.Win32.MAKOOB.TL0101F526ZZ |
| TrendMicro-HouseCall | Trojan.Win32.VSX.PE04CA5 |
| VBA32 | Malware-Cryptor.NSISex.Heur |
| ViRobot | Trojan.Win.Z.Makoob.418763 |
| VirIT | Trojan.Win32.GenusT.DWGB |
| Yandex | Trojan.Igent.b2iy8v.1 |
| alibabacloud | Trojan:Win/GuLoader.KCTZ3DGW |
| huorong | Trojan/NSIS.Injector.r!crit |
Process list
| Name | Command line |
|---|
| RFQ678903423_PROD_INQHASUE_de_mexico.exe | |