Classification: Malicious
3fD2HA9PJgZIVgwA.exe is a malicious file sample. Reported by 1 threat source, last seen 2023-11-28. Detected by 62 antivirus engines.
Detection summary
- 62 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Spyware |
VM-Ray |
2023-11-28 09:22:42 |
2023-11-28 09:22:42 |
|
|
| Injector |
VM-Ray |
2023-11-28 09:22:42 |
2023-11-28 09:22:42 |
|
|
Sample information
- Filenames
- 3fD2HA9PJgZIVgwA.exe
- File type
- PE32 executable (GUI) Intel 80386, for MS Windows
- SHA-256
48ae65647bed4561cd53eef783266af254c2cb41fd7c5ebab82fc76b751460c9- First indexed
- 2023-11-28 09:01:22
- Last updated
- 2026-09-03 00:33:49
Antivirus detections
| Engine | Detection |
|---|
| ALYac | Trojan.EmotetU.Gen.nW0@h4tzYQpi |
| APEX | Malicious |
| AVG | Win32:Downloader-IKD [Trj] |
| Acronis | suspicious |
| AhnLab-V3 | Trojan/Win32.Injector.R101570 |
| Antiy-AVL | Trojan[Backdoor]/Win32.Shiz |
| Arcabit | Trojan.EmotetU.Gen.ED1E7BF |
| Avast | Win32:Downloader-IKD [Trj] |
| Avira | TR/Crypt.XPACK.Gen |
| BitDefender | Trojan.EmotetU.Gen.nW0@h4tzYQpi |
| BitDefenderTheta | Gen:NN.ZexaF.36608.nW0@a4tzYQpi |
| Bkav | W32.AIDetectMalware |
| CAT-QuickHeal | PWS.Simda.A |
| ClamAV | Win.Trojan.Shiz-664 |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cybereason | malicious.9eb677 |
| Cylance | unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.DownLoader5.58022 |
| ESET-NOD32 | Win32/Spy.Shiz.NBX |
| Elastic | malicious (high confidence) |
| Emsisoft | Trojan.EmotetU.Gen.nW0@h4tzYQpi (B) |
| F-Secure | Trojan.TR/Crypt.XPACK.Gen |
| FireEye | Generic.mg.7b3f7c7dc8514fc6 |
| Fortinet | W32/Shiz.X!tr |
| GData | Win32.Trojan.PSE.1YR6FP6 |
| Google | Detected |
| Gridinsoft | Trojan.Heur!.02012121 |
| Ikarus | Backdoor.Win32.Shiz |
| Jiangmin | Backdoor/Shiz.bwm |
| K7AntiVirus | Trojan ( 002b2c141 ) |
| K7GW | Trojan ( 002b2c141 ) |
| Kaspersky | HEUR:Trojan.Win32.Generic |
| Kingsoft | malware.kb.a.1000 |
| MAX | malware (ai score=81) |
| Malwarebytes | Generic.Malware.AI.DDS |
| MaxSecure | Trojan.Shiz.gen |
| McAfee | Generic BackDoor.add |
| MicroWorld-eScan | Trojan.EmotetU.Gen.nW0@h4tzYQpi |
| Microsoft | PWS:Win32/Simda.D |
| NANO-Antivirus | Trojan.Win32.Crypted.cwnsyi |
| Panda | Trj/Genetic.gen |
| Rising | Trojan.Shifu!1.B287 (CLASSIC) |
| Sangfor | Trojan.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win32.Generic.dc |
| Sophos | Mal/FakeAv-NL |
| Symantec | ML.Attribute.HighConfidence |
| TACHYON | Backdoor/W32.Shiz.217088.B |
| Tencent | Trojan-Spy.Win32.Shiz.kb |
| Trapmine | malicious.high.ml.score |
| TrendMicro-HouseCall | TROJ_PAM_00000202A3.T3 |
| VBA32 | BScope.Malware-Cryptor.Hlux |
| VIPRE | Trojan.EmotetU.Gen.nW0@h4tzYQpi |
| Varist | W32/Shiz.A.gen!Eldorado |
| ViRobot | Backdoor.Win32.A.Shiz.217088 |
| VirIT | Backdoor.Win32.Generic.GVS |
| Webroot | W32.Trojan.Shiz.Gen |
| Yandex | Backdoor.Shiz!5xutJkq4Ak4 |
| Zillya | Backdoor.Shiz.Win32.3514 |
| ZoneAlarm | HEUR:Trojan.Win32.Generic |