[email protected]

Classification: Malicious

[email protected] is a trojan (Windows executable). Detected by 48 antivirus engines. Reported by Hybrid-Analysis and Triage, last seen 2026-11-07.

Detection summary

  • 48 antivirus detections
  • 21 IDS alerts
  • 0 processes observed
  • 16 contacted hosts
  • 32 DNS requests

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-11-07 04:45:05 2026-11-07 04:45:05 malicious-activity
Asyncrat Triage 2026-11-07 04:23:20 2026-11-07 04:23:20 malicious-activity

Tags

evasive malicious new_domain suspicious windows-server-utility asyncrat okvip adware defense_evasion discovery execution persistence rat spyware

Sample information

Filenames
[email protected]
File type
PE32 executable for MS Windows 4.00 (GUI), Intel i ...
MD5
d6359fccef58848bb5d417e14b1c88e0
SHA-1
abcd3dddb239e3d17d59001eb4832ee0e6e7a52c
SHA-256
4e340081b5f045bad2ea3cde0252fd1553161ed3293d29041e5e9bb1bcdac12c
First indexed
2026-11-07 04:23:20
Last updated
2026-11-07 04:56:02

Antivirus detections

EngineDetection
ALYacGeneric.AsyncRAT.Marte.B.9961B20E
APEXMalicious
AVGMSIL:AsyncRat-E [Pws]
AhnLab-V3Backdoor/Win.AsyncRAT.C5201934
Antiy-AVLTrojan[Backdoor]/MSIL.SheetRat
ArcabitGeneric.AsyncRAT.Marte.B.9961B20E
AvastMSIL:AsyncRat-E [Pws]
AviraTR/Dropper.Gen
BitDefenderGeneric.AsyncRAT.Marte.B.9961B20E
BkavW32.Malware.9DE8B39
CTXexe.unknown.asyncrat
ClamAVWin.Packed.Razy-9625918-0
CrowdStrikewin/malicious_confidence_100% (D)
CylanceUnsafe
DeepInstinctMALICIOUS
DrWebBackDoor.AsyncRATNET.2
ESET-NOD32MSIL/AsyncRAT.A trojan
ElasticWindows.Generic.Threat
EmsisoftGeneric.AsyncRAT.Marte.B.9961B20E (B)
F-SecureTrojan.TR/Dropper.Gen
FortinetMSIL/AsyncRAT.A!tr
GDataMSIL.Backdoor.DCRat.D
GoogleDetected
IkarusTrojan.MSIL.AsyncRAT
K7AntiVirusTrojan ( 005c228f1 )
K7GWTrojan ( 005c228f1 )
KasperskyHEUR:Backdoor.MSIL.SheetRat.gen
MalwarebytesBackdoor.AsyncRAT
MaxSecureTrojan.W64.180926.AsyncRat.YR
McAfeeDTrojan:Win/Generic.BCX
MicroWorld-eScanGeneric.AsyncRAT.Marte.B.9961B20E
MicrosoftBackdoor:MSIL/AsyncRat!atmn
NANO-AntivirusTrojan.Win32.AsyncRAT.lhhviy
RisingTrojan.AntiVM!1.CF63 (CLASSIC)
SangforSuspicious.Win32.Save.a
SentinelOneStatic AI - Malicious PE
SkyhighPWS-FCQR!D6359FCCEF58
SophosTroj/AsyncRat-B
SymantecInfostealer!im
TencentBackdoor.Msil.Dcrat.16002822
TrellixENSPWS-FCQR!D6359FCCEF58
TrendMicro-HouseCallTrojan.Win32.VSX.PE04CAN
VBA32Dropper.MSIL.gen
VIPREGeneric.AsyncRAT.Marte.B.9961B20E
VaristW32/MSIL_Agent.BTI.gen!Eldorado
VirITTrojan.Win32.MSIL_Heur.B
ZoneAlarmTroj/AsyncRat-B
huorongTrojan/TrickBot.pa

Network contacts

172.67.139.41 172.67.218.204 104.21.23.18 172.67.149.148 172.67.134.140 104.21.53.102 172.67.161.112 172.67.188.170 104.21.69.180 104.21.34.65 104.21.72.115 172.67.199.77 172.67.208.76 104.21.43.141 172.67.135.81 104.18.37.171

DNS requests

8kbet.ae.org 8kbet.ae.org:8443 b52club.bio cat.small-business-tracker.com cat.small-business-tracker.com:8443 crumbs.nat-ho.me crumbs.nat-ho.me:8443 fortunecomps.co.uk fortunecomps.co.uk:8443 m.asianslots.co m.asianslots.co:8443 member.noboncos.co member.noboncos.co:8443 nmk.yosusai.in nmk.yosusai.in:8443 register.mybet88.gg register.mybet88.gg:8443 sports.basebet.me w88thbet.com www.8kbet.ae.org www.cat.small-business-tracker.com www.crumbs.nat-ho.me www.fortunecomps.co.uk www.m.asianslots.co www.member.noboncos.co www.nmk.yosusai.in www.register.mybet88.gg www.xc.estates4u.co www.xx8.loans xc.estates4u.co xc.estates4u.co:8443 xx8.loans