1adc9f803f891d4e17075a18e0aab339.exe
Classification: Malicious
1adc9f803f891d4e17075a18e0aab339.exe is a malicious file sample. Linked to Servhelper malware. Reported by 1 threat source, last seen 2021-04-23.
Detection summary
- 70 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: SERVHELPER (S0382)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| ServHelper | Abuse.ch | 2021-04-23 06:17:18 | 2021-04-23 06:17:18 | malicious-activity | S0382 ServHelper |
Sample information
- Filenames
- 1adc9f803f891d4e17075a18e0aab339.exe
- File type
- application/x-dosexec
- MD5
1adc9f803f891d4e17075a18e0aab339- SHA-1
88ad0855e333445a35fe8fb81795fea9f353ec39- SHA-256
58850f83f71b00a7611d7d6011c5a21cc3cb34b59df0d258f16215a0f95f1408- First indexed
- 2021-04-23 08:15:14
- Last updated
- 2026-05-10 05:07:51
Antivirus detections
| Engine | Detection |
|---|---|
| Elastic | malicious (high confidence) |
| McAfee | Artemis!1ADC9F803F89 |
| Cylance | Unsafe |
| CrowdStrike | win/malicious_confidence_70% (W) |
| Cyren | W64/GoClr.A.gen!Eldorado |
| Symantec | Trojan.Gen.2 |
| ESET-NOD32 | a variant of WinGo/GoCLR.A |
| APEX | Malicious |
| ClamAV | Win.Malware.Bulz-9847817-0 |
| Kaspersky | UDS:DangerousObject.Multi.Generic |
| Avast | Win64:Trojan-gen |
| Rising | Trojan.GoCLR!8.12594 (CLOUD) |
| McAfee-GW-Edition | Artemis!Trojan |
| Sophos | ML/PE-A |
| Ikarus | Trojan.CobaltStrike |
| Jiangmin | Trojan.Cobalt.ic |
| Microsoft | Trojan:Win32/Hynamer.A!ml |
| Cynet | Malicious (score: 100) |
| AhnLab-V3 | Trojan/Win.Generic.R416312 |
| Malwarebytes | Malware.AI.4072052800 |
| eGambit | Unsafe.AI_Score_100% |
| Fortinet | W64/GoCLR.A!tr |
| AVG | Win64:Trojan-gen |
| ALYac | Trojan.GenericKD.36766527 |
| Alibaba | TrojanDropper:MSIL/AgentTesla.fa875838 |
| Antiy-AVL | Trojan[Dropper]/Win32.Agent |
| Arcabit | Trojan.Generic.D231033F |
| Avira | HEUR/AGEN.1318170 |
| BitDefender | Trojan.GenericKD.36766527 |
| Bkav | W64.AIDetectMalware |
| CAT-QuickHeal | Trojan.Ghanarava.1728330940aab339 |
| CTX | exe.trojan.goclr |
| CrowdStrike | win/malicious_confidence_100% (W) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.MulDrop16.45564 |
| Emsisoft | Trojan.GenericKD.36766527 (B) |
| F-Secure | Heuristic.HEUR/AGEN.1318170 |
| FireEye | Trojan.GenericKD.36766527 |
| GData | Trojan.GenericKD.36766527 |
| Detected | |
| Gridinsoft | Trojan.Win64.AI.oa!s1 |
| Ikarus | Trojan.WinGo.Rozena |
| K7AntiVirus | Trojan ( 0057c5571 ) |
| K7GW | Trojan ( 0057c5571 ) |
| Kaspersky | Trojan-Dropper.Win32.Agent.tetouf |
| Lionic | Trojan.Win32.GoCLR.b!c |
| Malwarebytes | Generic.Malware.AI.DDS |
| MaxSecure | Trojan.Malware.1728101.susgen |
| McAfee | GenericRXAA-AA!1ADC9F803F89 |
| McAfeeD | ti!58850F83F71B |
| MicroWorld-eScan | Trojan.GenericKD.36766527 |
| Microsoft | Trojan:MSIL/AgentTesla!MSR |
| Paloalto | generic.ml |
| Panda | Trj/CI.A |
| Rising | HackTool.GoCLR!1.D71D (CLASSIC) |
| Sangfor | Trojan.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win64.Kryptik.vh |
| Sophos | Mal/Generic-S |
| Symantec | ML.Attribute.HighConfidence |
| Tencent | Win32.Trojan-Dropper.Agent.Ywhl |
| TrendMicro | TROJ_GEN.R002C0DAN25 |
| TrendMicro-HouseCall | TROJ_GEN.R002C0DAN25 |
| VBA32 | Trojan.Hynamer |
| VIPRE | Trojan.GenericKD.36766527 |
| Varist | W64/GoClr.A.gen!Eldorado |
| Xcitium | Malware@#1lf4zfuw8o07b |
| Zillya | Trojan.GoCLR.Win32.38 |
| alibabacloud | Trojan:Win/Mucc.A |
| huorong | TrojanDropper/W64.Agent.t |