2026-09-02_5e655c772de27a108004f69d270f0927_agent-tesla_darkgate_elex_hawkeye_maze_netwire_remcos_xloader
Classification: Malicious
2026-09-02_5e655c772de27a108004f69d270f0927_agent-tesla_darkgate_elex_hawkeye_maze_netwire_remcos_xloader is a malicious file sample.
Detection summary
- 58 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: NETWIRE (S0198)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Netwire | Triage | 2026-09-03 00:36:00 | 2026-09-03 00:36:00 | malicious-activity | S0198 NETWIRE |
Tags
netwire warzonerat botnet discovery execution infostealer persistence rat stealerSample information
- Filenames
- 2026-09-02_5e655c772de27a108004f69d270f0927_agent-tesla_darkgate_elex_hawkeye_maze_netwire_remcos_xloader
- SHA-256
5579f6b6f68340adfd49da1c556beecc9d47610a9ede3978dc823223fd3aad05- First indexed
- 2026-09-03 00:36:00
- Last updated
- 2026-09-03 00:36:00
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | AIT:Trojan.Weecnaw.1 |
| APEX | Malicious |
| AVG | Win32:MalwareX-gen [Rat] |
| Antiy-AVL | Trojan/Win32.NetWire |
| Arcabit | Trojan.Variadic.A.187.1 [many] |
| Avast | Win32:MalwareX-gen [Rat] |
| Avira | TR/Spy.Gen |
| BitDefender | Gen:Heur.Variadic.A.187.1 |
| Bkav | W32.Malware.7782DBBA |
| CTX | exe.trojan.weecnaw |
| ClamAV | Win.Trojan.Ulise-7135679-1 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | BackDoor.Wirenet.543 |
| ESET-NOD32 | Win32/Spy.Weecnaw.O trojan |
| Elastic | Windows.Trojan.Netwire |
| Emsisoft | Gen:Heur.Variadic.A.187.1 (B) |
| F-Secure | Trojan.TR/Spy.Gen |
| Fortinet | AutoIt/Injector.DUY!tr |
| GData | AIT:Trojan.Weecnaw.1 |
| Detected | |
| Gridinsoft | Trojan.Heur!.03006021 |
| K7AntiVirus | Trojan ( 005c86201 ) |
| K7GW | Trojan ( 005c86201 ) |
| Kaspersky | Trojan.Win32.NetWire.bh |
| Kingsoft | malware.kb.a.1000 |
| Malwarebytes | Weecnaw.Spyware.Stealer.DDS |
| MaxSecure | Trojan.Malware.300983.susgen |
| McAfeeD | Trojan:Win/AveMaria.OX |
| MicroWorld-eScan | Gen:Heur.Variadic.A.187.1 |
| Microsoft | Trojan:Win32/NetWire!pz |
| NANO-Antivirus | Trojan.Win32.Dapato.fbcjkw |
| Panda | Trj/Genetic.gen |
| Rising | Backdoor.NetWire!1.B84F (CLASSIC) |
| Sangfor | Virus.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win32.Dropper.th |
| Sophos | Troj/Netwire-MS |
| Symantec | ML.Attribute.HighConfidence |
| Tencent | Trojan.Win32.Autoit_new.404661 |
| Trapmine | malicious.high.ml.score |
| TrellixENS | Artemis!5E655C772DE2 |
| TrendMicro | TSPY_WEECNAW.SMC |
| TrendMicro-HouseCall | TSPY_WEECNAW.SMC |
| VBA32 | BScope.TrojanSpy.Loyeetro |
| VIPRE | Gen:Heur.Variadic.A.187.1 |
| Varist | W32/Trojan.BIA.gen!Eldorado |
| VirIT | Backdoor.Win32.Wirenet.CCS |
| Webroot | W32.Backdoor.Gen |
| Xcitium | TrojWare.Win32.TrojanSpy.Loyeetro.A@8lofxp |
| Yandex | Trojan.GenAsa!wuPhUbOs0XU |
| ZoneAlarm | Mal/AuItInj-A |
| Zoner | Trojan.Win32.124944 |
| alibabacloud | Trojan:Win/Weecnaw |
| huorong | Trojan/Injector.blh |
| tehtris | Generic.Malware |