42e6067337ac9edd1ed6603ca8ed4f4f89520bca0995116e7095c2426b7edfe2
Classification: Malicious
42e6067337ac9edd1ed6603ca8ed4f4f89520bca0995116e7095c2426b7edfe2 is a trojan (dll). Detected by 50 antivirus engines. Linked to Mustang Panda activity.
Detection summary
- 50 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Intrusion sets: MUSTANG PANDA (G0129)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic.Malware | MalwareBazaar Abuse.ch | 2026-01-29 08:14:25 | 2026-01-29 08:14:25 | malicious-activity | |
| MustangPanda | MalwareBazaar Abuse.ch | 2026-01-29 08:14:25 | 2026-01-29 08:14:25 | malicious-activity | G0129 Mustang Panda |
Sample information
- Filenames
- 42e6067337ac9edd1ed6603ca8ed4f4f89520bca0995116e7095c2426b7edfe2
- File type
- dll
- MD5
9e5f0a459be82074cd896996bd57b358- SHA-1
199330a6e8431dba0fe5c1bb0883789db7a7164b- SHA-256
42e6067337ac9edd1ed6603ca8ed4f4f89520bca0995116e7095c2426b7edfe2- First indexed
- 2026-01-29 08:14:25
- Last updated
- 2026-08-16 18:56:32
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Gen:Variant.Fragtor.819509 |
| AVG | Win32:MalwareX-gen [Misc] |
| AhnLab-V3 | Trojan/Win.Agent.C5807321 |
| Alibaba | Trojan:Win32/Generic.3650f577 |
| Arcabit | Trojan.Fragtor.DC8135 |
| Avast | Win32:MalwareX-gen [Misc] |
| Avira | TR/Agent.cfdee |
| BitDefender | Gen:Variant.Fragtor.819509 |
| Bkav | W32.AIDetectMalware |
| CAT-QuickHeal | Trojan.Ghanarava.176960918657b358 |
| CTX | dll.trojan.generic |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Siggen32.21111 |
| ESET-NOD32 | Win32/Agent.AHAX trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Variant.Fragtor.819509 (B) |
| F-Secure | Trojan.TR/Agent.cfdee |
| Fortinet | W32/Agent.AHAX!tr |
| GData | Gen:Variant.Fragtor.819509 |
| Detected | |
| Ikarus | Trojan.Win32.Agent |
| K7AntiVirus | Trojan ( 005d642a1 ) |
| K7GW | Trojan ( 005d642a1 ) |
| Kaspersky | Trojan.MSIL.BypassUAC.alr |
| Kingsoft | malware.kb.a.834 |
| Lionic | Trojan.Win32.BypassUAC.4!c |
| Malwarebytes | Malware.AI.3650803781 |
| MaxSecure | Trojan.Malware.7164915.susgen |
| McAfeeD | ti!42E6067337AC |
| MicroWorld-eScan | Gen:Variant.Fragtor.819509 |
| Microsoft | Trojan:Win32/Wacatac.B!ml |
| Paloalto | generic.ml |
| Panda | Trj/Chgt.AD |
| Rising | Trojan.Agent!8.B1E (CLOUD) |
| Sangfor | Trojan.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win32.NetLoader.ch |
| Sophos | Mal/Generic-S |
| Tencent | Malware.Win32.Gencirc.1460d40b |
| Trapmine | malicious.moderate.ml.score |
| TrellixENS | Artemis!9E5F0A459BE8 |
| TrendMicro-HouseCall | Trojan.Win32.VSX.PE04C9t |
| VIPRE | Gen:Variant.Fragtor.819509 |
| Varist | W32/ABTrojan.IUNJ-7875 |
| ViRobot | Trojan.Win.Z.Agent.200192.DR |
| Zillya | Trojan.Agent.Win32.4232905 |
| alibabacloud | Trojan:Win/BypassUAC.afs |