60C30150ED574E2AFB00ACF25819D85BBA6E2F646F6A7.exe

Classification: Malicious

60C30150ED574E2AFB00ACF25819D85BBA6E2F646F6A7.exe is a trojan (Windows executable, 24.0 KB). Flagged by 73% of antivirus engines (83 detections).

Detection summary

  • 83 antivirus detections (73% detection ratio)
  • 1 IDS alerts
  • 1 processes observed
  • 6 contacted hosts
  • 1 DNS requests

MITRE ATT&CK associations

Malware families: REVENGE RAT (S0379)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2023-11-04 14:45:04 2026-08-25 12:45:05 malicious-activity
RevengeRAT MalwareBazaar Abuse.ch 2023-11-04 14:25:34 2023-11-04 14:25:34 malicious-activity S0379 Revenge RAT

Tags

evasive msil revenge-rat

Sample information

Filenames
60c30150ed574e2afb00acf25819d85bba6e2f646f6a785ef2ffe4326bc52e5d, 60C30150ED574E2AFB00ACF25819D85BBA6E2F646F6A7.exe
File type
PE32 executable (GUI) Intel 80386 Mono/.Net assemb ...
Size
24576 bytes
MD5
586675b05d6fe0a4e3719b4d1c34a751
SHA-1
a754650cc8bb52f285346df00ca1e382b37468fe
SHA-256
60c30150ed574e2afb00acf25819d85bba6e2f646f6a785ef2ffe4326bc52e5d
First indexed
2023-11-04 14:30:56
Last updated
2026-08-25 12:45:05

Antivirus detections

EngineDetection
LionicTrojan.Win32.RRAT.4!c
ElasticWindows.Trojan.Revengerat
DrWebBackDoor.RevetRat.2
MicroWorld-eScanIL:Trojan.MSILZilla.19283
FireEyeGeneric.mg.586675b05d6fe0a4
CAT-QuickHealTrojan.RratFC.S12591314
SkyhighGenericRXKA-TT!586675B05D6F
ALYacIL:Trojan.MSILZilla.19283
Cylanceunsafe
VIPREIL:Trojan.MSILZilla.19283
SangforSuspicious.Win32.Save.a
BitDefenderIL:Trojan.MSILZilla.19283
Cybereasonmalicious.cc8bb5
BitDefenderThetaGen:NN.ZemsilF.36792.bm0@ayD9MRp
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Agent.ATK
APEXMalicious
ClamAVWin.Packed.Razy-9645384-0
KasperskyHEUR:Trojan.Win32.RRAT.gen
ViRobotTrojan.Win.Z.Agent.24576.ISZ
RisingBackdoor.LimeRat!1.D55A (CLASSIC)
EmsisoftIL:Trojan.MSILZilla.19283 (B)
GoogleDetected
F-SecureTrojan.TR/ATRAPS.Gen
TrendMicroBackdoor.MSIL.REVERAT.SMTH
Trapminemalicious.moderate.ml.score
SophosTroj/RAT-GS
SentinelOneStatic AI - Malicious PE
GDataIL:Trojan.MSILZilla.19283
VaristW32/MSIL_Kryptik.AXU.gen!Eldorado
AviraTR/ATRAPS.Gen
Antiy-AVLTrojan/Win32.RRAT
Kingsoftmalware.kb.c.1000
ArcabitIL:Trojan.MSILZilla.D4B53
ZoneAlarmHEUR:Trojan.Win32.RRAT.gen
MicrosoftBackdoor:MSIL/RevengeRat
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.RL_Generic.C3517676
McAfeeGenericRXKA-TT!586675B05D6F
MAXmalware (ai score=82)
DeepInstinctMALICIOUS
VBA32Backdoor.MSIL.Revenge.Heur
MalwarebytesBackdoor.RevengeRAT
PandaTrj/CI.A
ZonerTrojan.Win32.86676
TrendMicro-HouseCallBackdoor.MSIL.REVERAT.SMTH
YandexTrojan.RRAT!WKGZd3iVORY
IkarusTrojan.MSIL.Agent
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/Agent.ATK!tr
AVGWin32:BackdoorX-gen [Trj]
AvastWin32:BackdoorX-gen [Trj]
CrowdStrikewin/malicious_confidence_100% (W)
ALYacGen:Variant.Razy.574191
AVGWin32:MalwareX-gen [Bd]
AlibabaBackdoor:MSIL/RevengeRat.9aa112ea
ArcabitTrojan.Razy.D8C2EF
AvastWin32:MalwareX-gen [Bd]
BitDefenderGen:Variant.Razy.574191
BkavW32.AIDetectMalware.CS
CTXexe.trojan.msil
CylanceUnsafe
EmsisoftGen:Variant.Razy.574191 (B)
GDataGen:Variant.Razy.574191
JiangminTrojan.RRAT.bfv
K7AntiVirusTrojan ( 00509c531 )
K7GWTrojan ( 00509c531 )
KingsoftWin32.Trojan.RRAT.gen
LionicTrojan.Win32.RevengeRat.4!c
McAfeeDReal Protect-LS!586675B05D6F
MicroWorld-eScanGen:Variant.Razy.574191
NANO-AntivirusTrojan.Win32.RRAT.kdcxqc
Paloaltogeneric.ml
SymantecRansom.Zombie
TencentWin32.Trojan.Rrat.Mgil
TrellixENSGenericRXKA-TT!586675B05D6F
VIPREGen:Variant.Razy.574191
VirITTrojan.Win32.Genus.UAZ
XcitiumMalware@#3vzy2mn7n0dsc
ZillyaTrojan.Agent.Win32.3883915
ZoneAlarmTroj/RAT-GS
alibabacloudBackdoor[rat]:MSIL/RevengeRAT
huorongBackdoor/MSIL.Agent.b

Network contacts

178.162.203.226 178.162.203.202 85.17.31.82 5.79.71.225 5.79.71.205 198.23.227.149

DNS requests

alice2019.myftp.biz

Process list

NameCommand line
60C30150ED574E2AFB00ACF25819D85BBA6E2F646F6A7.exe