httpshelper.bin

Classification: Malicious

httpshelper.bin is a trojan (application/x-dosexec). Detected by 86 antivirus engines. Linked to Invisimole malware. 4 sightings, last seen 2026-09-10.

Detection summary

  • 86 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: INVISIMOLE (S0260)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Cyber Threat Alliance 2026-09-10 10:12:41 2026-09-10 10:12:41 malicious-activity
Invisimole Maltiverse 2023-03-31 04:13:53 2023-04-01 00:17:33 malicious-activity S0260 InvisiMole
Ghostwriter Maltiverse 2023-03-31 04:13:54 2023-04-01 00:17:27 malicious-activity
Generic.Malware MalwareBazaar Abuse.ch 2022-03-23 00:50:45 2022-03-23 00:50:45 malicious-activity

Tags

apt

Sample information

Filenames
httpshelper.bin
File type
application/x-dosexec
MD5
1aba36f72685c12e60fb0922b606417c
SHA-1
3552c184281abcc14e3b941841b698cfb0ec9f1d
SHA-256
63a218d3fc7c2f7fcadc0f6f907f326cc86eb3f8cf122704597454c34c141cf1
First indexed
2022-03-23 02:15:06
Last updated
2025-11-09 03:05:29

Antivirus detections

EngineDetection
BkavW32.AIDetect.malware2
LionicTrojan.Win32.Agent.a!c
Elasticmalicious (high confidence)
DrWebTrojan.DownLoader44.46913
MicroWorld-eScanTrojan.GenericKDS.39310356
FireEyeGeneric.mg.1aba36f72685c12e
ALYacTrojan.GenericKDS.39310356
MalwarebytesTrojan.Loader
SangforTrojan.Win32.Agent.gen
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojanDownloader:Win32/Generic.805cfc6f
K7GWTrojan-Downloader ( 0056edb61 )
K7AntiVirusTrojan-Downloader ( 0056edb61 )
ESET-NOD32a variant of Win32/TrojanDownloader.Tiny.NRF
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan-Downloader.Win32.Agent.gen
BitDefenderTrojan.GenericKDS.39310356
AvastWin32:Trojan-gen
RisingBackdoor.Agent!1.DCCF (CLOUD)
Ad-AwareTrojan.GenericKDS.39310356
EmsisoftTrojan.GenericKDS.39310356 (B)
McAfee-GW-EditionGenericRXOC-YP!1ABA36F72685
SophosMal/Generic-S
SentinelOneStatic AI - Suspicious PE
MAXmalware (ai score=84)
MicrosoftBackdoor:Win32/Phaetp.A!dha
ZoneAlarmHEUR:Trojan-Downloader.Win32.Agent.gen
GDataTrojan.GenericKDS.39310356
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Generic.C5025140
McAfeeGenericRXOC-YP!1ABA36F72685
CylanceUnsafe
TrendMicro-HouseCallTROJ_GEN.R002H0CCM22
TencentWin32.Trojan.Generic.Eaxu
IkarusTrojan-Downloader.Win32.Tiny
FortinetW32/Tiny.NRF!tr
AVGWin32:Trojan-gen
ALYacTrojan.Downloader.Tiny
AVGWin32:MalwareX-gen [Drp]
AlibabaBackdoor:Win32/Phaetp.6bfc69dd
Antiy-AVLTrojan[Backdoor]/Win32.Phaetp
ArcabitTrojan.Zusy.D661DC
AvastWin32:MalwareX-gen [Drp]
AviraHEUR/AGEN.1350706
BitDefenderGen:Variant.Zusy.418268
BkavW32.AIDetectMalware
CAT-QuickHealTrojan.Ghanarava.173357927406417c
CTXdll.trojan.tiny
DeepInstinctMALICIOUS
EmsisoftGen:Variant.Zusy.418268 (B)
F-SecureHeuristic.HEUR/AGEN.1350706
GDataGen:Variant.Zusy.418268
GoogleDetected
GridinsoftTrojan.Win32.Downloader.oa!s1
JiangminTrojan.APosT.ayg
K7AntiVirusTrojan-Downloader ( 0059078b1 )
K7GWTrojan-Downloader ( 0059078b1 )
KingsoftWin32.Trojan-Downloader.Agent.gen
LionicTrojan.Win32.Tiny.a!c
MalwarebytesTrojan.Downloader
MaxSecureTrojan.Malware.1207211.susgen
McAfeeDti!63A218D3FC7C
MicroWorld-eScanGen:Variant.Zusy.418268
NANO-AntivirusTrojan.Win32.Tiny.jrekty
PandaTrj/GdSda.A
RisingBackdoor.HeaderTip!1.DCCF (CLASSIC)
SangforDownloader.Win32.Tiny.V5xc
SkyhighGenericRXOC-YP!1ABA36F72685
SymantecML.Attribute.HighConfidence
TACHYONTrojan-Downloader/W32.Agent.9728.LI
TencentMalware.Win32.Gencirc.115d1d42
TrellixENSGenericRXOC-YP!1ABA36F72685
TrendMicroTrojan.Win32.HEADERTIP.YECCV
TrendMicro-HouseCallTrojan.Win32.HEADERTIP.YECCV
VBA32TrojanDownloader.Agent
VIPREGen:Variant.Zusy.418268
VaristW32/Downloader.ALJA-8180
ViRobotTrojan.Win32.S.Agent.9728.AYS
VirITTrojan.Win32.GenusT.FFNN
XcitiumMalware@#1oedeylb0b1j6
ZillyaDownloader.Tiny.Win32.23769
ZoneAlarmTroj/DwnLd-AAZ
alibabacloudBackdoor:Win/Phaetp.A9hyq
huorongTrojanDownloader/Agent.yg
tehtrisGeneric.Malware