[email protected]
Classification: Malicious
[email protected] is a trojan (Windows executable). Detected by 48 antivirus engines. Reported by Hybrid-Analysis and Triage, last seen 2026-11-07.
Detection summary
- 48 antivirus detections
- 21 IDS alerts
- 0 processes observed
- 16 contacted hosts
- 32 DNS requests
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-11-07 04:45:05 | 2026-11-07 04:45:05 | malicious-activity | |
| Asyncrat | Triage | 2026-11-07 04:23:20 | 2026-11-07 04:23:20 | malicious-activity |
Tags
evasive malicious new_domain suspicious windows-server-utility asyncrat okvip adware defense_evasion discovery execution persistence rat spywareSample information
- Filenames
- [email protected]
- File type
- PE32 executable for MS Windows 4.00 (GUI), Intel i ...
- MD5
d6359fccef58848bb5d417e14b1c88e0- SHA-1
abcd3dddb239e3d17d59001eb4832ee0e6e7a52c- SHA-256
4e340081b5f045bad2ea3cde0252fd1553161ed3293d29041e5e9bb1bcdac12c- First indexed
- 2026-11-07 04:23:20
- Last updated
- 2026-11-07 04:56:02
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Generic.AsyncRAT.Marte.B.9961B20E |
| APEX | Malicious |
| AVG | MSIL:AsyncRat-E [Pws] |
| AhnLab-V3 | Backdoor/Win.AsyncRAT.C5201934 |
| Antiy-AVL | Trojan[Backdoor]/MSIL.SheetRat |
| Arcabit | Generic.AsyncRAT.Marte.B.9961B20E |
| Avast | MSIL:AsyncRat-E [Pws] |
| Avira | TR/Dropper.Gen |
| BitDefender | Generic.AsyncRAT.Marte.B.9961B20E |
| Bkav | W32.Malware.9DE8B39 |
| CTX | exe.unknown.asyncrat |
| ClamAV | Win.Packed.Razy-9625918-0 |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cylance | Unsafe |
| DeepInstinct | MALICIOUS |
| DrWeb | BackDoor.AsyncRATNET.2 |
| ESET-NOD32 | MSIL/AsyncRAT.A trojan |
| Elastic | Windows.Generic.Threat |
| Emsisoft | Generic.AsyncRAT.Marte.B.9961B20E (B) |
| F-Secure | Trojan.TR/Dropper.Gen |
| Fortinet | MSIL/AsyncRAT.A!tr |
| GData | MSIL.Backdoor.DCRat.D |
| Detected | |
| Ikarus | Trojan.MSIL.AsyncRAT |
| K7AntiVirus | Trojan ( 005c228f1 ) |
| K7GW | Trojan ( 005c228f1 ) |
| Kaspersky | HEUR:Backdoor.MSIL.SheetRat.gen |
| Malwarebytes | Backdoor.AsyncRAT |
| MaxSecure | Trojan.W64.180926.AsyncRat.YR |
| McAfeeD | Trojan:Win/Generic.BCX |
| MicroWorld-eScan | Generic.AsyncRAT.Marte.B.9961B20E |
| Microsoft | Backdoor:MSIL/AsyncRat!atmn |
| NANO-Antivirus | Trojan.Win32.AsyncRAT.lhhviy |
| Rising | Trojan.AntiVM!1.CF63 (CLASSIC) |
| Sangfor | Suspicious.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | PWS-FCQR!D6359FCCEF58 |
| Sophos | Troj/AsyncRat-B |
| Symantec | Infostealer!im |
| Tencent | Backdoor.Msil.Dcrat.16002822 |
| TrellixENS | PWS-FCQR!D6359FCCEF58 |
| TrendMicro-HouseCall | Trojan.Win32.VSX.PE04CAN |
| VBA32 | Dropper.MSIL.gen |
| VIPRE | Generic.AsyncRAT.Marte.B.9961B20E |
| Varist | W32/MSIL_Agent.BTI.gen!Eldorado |
| VirIT | Trojan.Win32.MSIL_Heur.B |
| ZoneAlarm | Troj/AsyncRat-B |
| huorong | Trojan/TrickBot.pa |
Network contacts
172.67.139.41 172.67.218.204 104.21.23.18 172.67.149.148 172.67.134.140 104.21.53.102 172.67.161.112 172.67.188.170 104.21.69.180 104.21.34.65 104.21.72.115 172.67.199.77 172.67.208.76 104.21.43.141 172.67.135.81 104.18.37.171
DNS requests
8kbet.ae.org 8kbet.ae.org:8443 b52club.bio cat.small-business-tracker.com cat.small-business-tracker.com:8443 crumbs.nat-ho.me crumbs.nat-ho.me:8443 fortunecomps.co.uk fortunecomps.co.uk:8443 m.asianslots.co m.asianslots.co:8443 member.noboncos.co member.noboncos.co:8443 nmk.yosusai.in nmk.yosusai.in:8443 register.mybet88.gg register.mybet88.gg:8443 sports.basebet.me w88thbet.com www.8kbet.ae.org www.cat.small-business-tracker.com www.crumbs.nat-ho.me www.fortunecomps.co.uk www.m.asianslots.co www.member.noboncos.co www.nmk.yosusai.in www.register.mybet88.gg www.xc.estates4u.co www.xx8.loans xc.estates4u.co xc.estates4u.co:8443 xx8.loans