HEHE.exe

Classification: Malicious

HEHE.exe is a malicious file sample (Windows 64-bit executable). Linked to Remcos malware. Reported by Triage and Hybrid-Analysis, last seen 2026-10-18.

Detection summary

  • 0 antivirus detections
  • 12 IDS alerts
  • 0 processes observed
  • 1 contacted hosts
  • 5 DNS requests

MITRE ATT&CK associations

Malware families: REMCOS (S0332)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-10-18 05:45:04 2026-10-18 05:45:04 malicious-activity
Remcos Triage 2026-10-18 04:50:37 2026-10-18 04:50:37 malicious-activity S0332 Remcos

Tags

remcos remotehost discovery persistence rat suricata malicious new_domain

Sample information

Filenames
HEHE.exe
File type
PE32+ executable for MS Windows 5.02 (GUI), x86-64 ...
MD5
5caaf66084d206683052bf95d31f3bf5
SHA-1
84e156a1bee5240d3aa2bf45aaca2549f0e6fc13
SHA-256
4c066b1c08ec708c3dafdfd31c46a26f343fe81d600d4fb085994797d50fc3aa
First indexed
2026-10-18 04:50:37
Last updated
2026-10-18 05:45:04

Network contacts

172.67.177.77

DNS requests

backdoor.rajaslot5000.cc c2.rajaslot5000.cc malware.rajaslot5000.cc rajaslot5000.cc www.rajaslot5000.cc