f_ex86.node
Classification: Malicious
f_ex86.node is a trojan. Detected by 35 antivirus engines. Linked to Glassworm malware. 4 sightings from MalwareBazaar Abuse.ch, last seen 2026-04-15.
Detection summary
- 35 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: GLASSWORM (S9010)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| GlassWorm | MalwareBazaar Abuse.ch | 2026-04-15 16:46:32 | 2026-04-15 16:46:32 | malicious-activity | S9010 GlassWorm |
Sample information
- Filenames
- f_ex86.node
- MD5
6514db96c286bad1b5361ecfc9e8c656- SHA-1
e863fe4172f047a6331ebcb4e09a5d83fb089ad8- SHA-256
5753dcccb7f40375067a4a788a78a0846e1ac43d78ba314739594a2145b77fb8- First indexed
- 2026-04-15 16:46:32
- Last updated
- 2026-10-16 02:14:32
Antivirus detections
| Engine | Detection |
|---|---|
| AVG | Win64:MalwareX-gen [Misc] |
| AhnLab-V3 | Trojan/Win.Generic.C5866781 |
| Antiy-AVL | Trojan/Win32.Agent |
| Avast | Win64:MalwareX-gen [Misc] |
| Avira | TR/W64.Agent |
| CTX | dll.trojan.generic |
| Cylance | Unsafe |
| Cynet | Malicious (score: 99) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Siggen32.32892 |
| ESET-NOD32 | Win64/Agent.JFP trojan |
| Elastic | malicious (high confidence) |
| F-Secure | Trojan.TR/W64.Agent |
| Fortinet | W32/PossibleThreat |
| Detected | |
| K7AntiVirus | Riskware ( 00584baa1 ) |
| K7GW | Riskware ( 00584baa1 ) |
| Kaspersky | Trojan.Win64.Agent.smgbfs |
| Lionic | Trojan.Win32.Convagent.4!c |
| Malwarebytes | Malware.AI.4253955088 |
| McAfeeD | ti!5753DCCCB7F4 |
| Microsoft | Trojan:Win64/DLLHijack!MTB |
| Paloalto | generic.ml |
| Panda | Trj/PhxBzA.A |
| Rising | Trojan.Convagent!8.12323 (CLOUD) |
| Sophos | Mal/Generic-S |
| Symantec | Trojan.Gen.MBT |
| Tencent | Malware.Win32.Gencirc.10c46bc1 |
| TrellixENS | Artemis!6514DB96C286 |
| VBA32 | Trojan.Win64.Agent |
| Varist | W64/ABmRisk.LYCU-6753 |
| Webroot | Win.Malware.Gen |
| Xcitium | ApplicUnwnt@#304h25m77bwz3 |
| Zillya | Trojan.Agent.Win64.182343 |
| alibabacloud | Trojan:Win/Wacatac.B9nj |