07715799.exe

Classification: Malicious

07715799.exe is a trojan (Windows executable, 307.0 KB). Flagged by 70% of antivirus engines (92 detections). Linked to Apt37 activity.

Detection summary

  • 92 antivirus detections (70% detection ratio)
  • 1 IDS alerts
  • 11 processes observed
  • 1 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: APT37 (G0067)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Apt37 Maltiverse 2023-07-04 04:28:55 2023-07-05 20:50:45 malicious-activity G0067 APT37
Generic Malware Hybrid-Analysis 2023-06-20 13:25:46 2023-06-20 13:25:46

Tags

apt

Sample information

Filenames
07715799.exe
File type
PE32 executable (GUI) Intel 80386, for MS Windows
Size
314368 bytes
MD5
9a97e9f36c856d7660f1dedd940a7527
SHA-1
5b2836e25c740fd47781a965a5a20f684b93d675
SHA-256
60da6ce55330f4f38e98b39bf07cf75fdabd80296429f1538c48d5df499d48d2
First indexed
2023-06-20 13:13:12
Last updated
2025-11-01 17:37:25

Antivirus detections

EngineDetection
BkavW32.AIDetectMalware
LionicTrojan.Win32.GCleaner.4!c
DrWebTrojan.Inject4.58386
MicroWorld-eScanTrojan.GenericKD.67624646
FireEyeGeneric.mg.9a97e9f36c856d76
MalwarebytesTrojan.MalPack.GS
CynetMalicious (score: 100)
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaMalware:Win32/km_24afa.None
K7GWTrojan ( 005a60081 )
K7AntiVirusTrojan ( 005a60081 )
CyrenW32/Kryptik.KAS.gen!Eldorado
SymantecPacked.Generic.528
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Kryptik.HTVU
APEXMalicious
KasperskyHEUR:Trojan.Win32.Zenpak.gen
BitDefenderTrojan.GenericKD.67624646
ViRobotTrojan.Win.Z.Agent.314368.O
AvastWin32:CrypterX-gen [Trj]
RisingTrojan.SmokeLoader!1.E66C (CLASSIC)
EmsisoftTrojan.GenericKD.67624646 (B)
TrendMicroTrojan.Win32.AMADEY.YXDFTZ
McAfee-GW-EditionBehavesLike.Win32.Corrupt.fc
Trapminemalicious.high.ml.score
SophosTroj/Krypt-WE
IkarusTrojan.Win32.Crypt
WebrootW32.Trojan.Gen
MAXmalware (ai score=83)
Antiy-AVLTrojan/Win32.Zenpak
GridinsoftMalware.Win32.Gen.bot
ArcabitTrojan.Generic.D407DEC6
ZoneAlarmHEUR:Trojan.Win32.Zenpak.gen
GDataTrojan.GenericKD.67624646
GoogleDetected
AhnLab-V3Trojan/Win.SmokeLoader.R587217
Acronissuspicious
McAfeeArtemis!9A97E9F36C85
VBA32TrojanDownloader.Smoke
Cylanceunsafe
PandaTrj/Chgt.AD
TrendMicro-HouseCallTrojan.Win32.AMADEY.YXDFTZ
TencentTrojan.Win32.Obfuscated.gen
SentinelOneStatic AI - Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetPossibleThreat.MU
AVGWin32:CrypterX-gen [Trj]
DeepInstinctMALICIOUS
ALYacTrojan.GenericKD.67657156
AVGWin32:MalwareX-gen [Cryp]
Antiy-AVLTrojan/Win32.Kryptik
ArcabitTrojan.Generic.D4085DC4
AvastWin32:MalwareX-gen [Cryp]
AviraHEUR/AGEN.1365748
BitDefenderTrojan.GenericKD.67657156
CAT-QuickHealTrojan.Ghanarava.17316451780a7527
CTXexe.trojan.kryptik
CylanceUnsafe
ElasticWindows.Trojan.Smokeloader
EmsisoftTrojan.GenericKD.67657156 (B)
F-SecureHeuristic.HEUR/AGEN.1365748
FortinetW32/Kryptik.HTVQ!tr
GDataTrojan.GenericKD.67657156
GridinsoftRansom.Win32.STOP.dg!n
JiangminTrojanSpy.Stealer.aiit
K7AntiVirusTrojan ( 005aa8941 )
K7GWTrojan ( 005aa8941 )
KingsoftWin32.Trojan.Zenpak.gen
LionicTrojan.Win32.SmokeLoader.4!c
MalwarebytesGeneric.Malware.AI.DDS
MaxSecureTrojan.Malware.73832973.susgen
McAfeeDReal Protect-LS!9A97E9F36C85
MicroWorld-eScanTrojan.GenericKD.67657156
MicrosoftTrojan:Win32/Redline.FKI!MTB
NANO-AntivirusTrojan.Win32.Inject4.jwxgpb
Paloaltogeneric.ml
SUPERAntiSpywareRansom.Stop/Variant
SangforSuspicious.Win32.Save.pkr
SkyhighBehavesLike.Win32.Generic.fc
SophosTroj/Krypt-XU
TrellixENSLockbit-FSWW!9A97E9F36C85
TrendMicroRansom.Win32.PHOBOS.SMTHA.hp
TrendMicro-HouseCallRansom.Win32.PHOBOS.SMTHA.hp
VBA32TrojanDownloader.Ajent
VIPRETrojan.GenericKD.67657156
VaristW32/Kryptik.KAS.gen!Eldorado
VirITTrojan.Win32.Genus.RLW
XcitiumMalware@#2zgria0wyof1e
YandexTrojan.Kryptik!7UZrx9Q0zJM
ZillyaTrojan.Kryptik.Win32.4610367
ZoneAlarmTroj/Krypt-XU
alibabacloudTrojan:Win/Redline.FHE2XJC

Network contacts

45.12.253.56

Process list

NameCommand line
07715799.exe
WerFault.exe-u -p 2020 -s 548
WerFault.exe-u -p 2020 -s 576
WerFault.exe-u -p 2020 -s 852
WerFault.exe-u -p 2020 -s 876
WerFault.exe-u -p 2020 -s 876
WerFault.exe-u -p 2020 -s 1000
WerFault.exe-u -p 2020 -s 1364
WerFault.exe-u -p 2020 -s 1388
cmd.exe/c taskkill /im "07715799.exe" /f & erase "C:\07715799.exe" & exit
taskkill.exetaskkill /im "07715799.exe" /f