2026-03-05_e74179bf523575403af96ff82ed59ad7_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader_wapomi
Classification: Malicious
2026-03-05_e74179bf523575403af96ff82ed59ad7_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader_wapomi is a virus. Detected by 66 antivirus engines.
Detection summary
- 66 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: EGREGOR (S0554)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Egregor | Triage | 2026-03-05 07:07:26 | 2026-03-05 07:07:26 | malicious-activity | S0554 Egregor |
Tags
bdaejec egregor aspackv2 backdoor discoverySample information
- Filenames
- 2026-03-05_e74179bf523575403af96ff82ed59ad7_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader_wapomi
- MD5
e74179bf523575403af96ff82ed59ad7- SHA-1
bca449aa4f96087bed14d1a75f4329d2446f580d- SHA-256
648730b81b5382a905c269f178bd05a9e09772fe48847b9d854c8c52188e1326- SHA-512
6e3c206e4bc43fbc7483e411fc79523af413640ae1018155f1f7cce1cd3045bf10c1e46949ae918e13552ccebc36bb16d14ee122180985ab25fce650f197f782- First indexed
- 2026-03-05 07:07:26
- Last updated
- 2026-09-03 03:17:40
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Win32.VJadtre.3 |
| APEX | Malicious |
| AVG | Other:Malware-gen [Trj] |
| Acronis | suspicious |
| AhnLab-V3 | Win32/VJadtre.Gen |
| Alibaba | Virus:Win32/Nimnul.402c |
| Antiy-AVL | Virus/Win32.Nimnul.f |
| Arcabit | Win32.VJadtre.3 |
| Avast | Other:Malware-gen [Trj] |
| Avira | W32/Jadtre.B |
| Baidu | Win32.Virus.Otwycal.d |
| BitDefender | Win32.VJadtre.3 |
| Bkav | W32.FamVT.DumpModuleInfectiousNME.PE |
| CAT-QuickHeal | Trojan.Ghanarava.1773140496d59ad7 |
| CTX | exe.virus.nimnul |
| ClamAV | Win.Malware.Wapomi-10020301-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | BackDoor.Darkshell.246 |
| ESET-NOD32 | Win32/Wapomi.BA virus |
| Elastic | malicious (high confidence) |
| Emsisoft | Win32.VJadtre.3 (B) |
| F-Secure | Malware.W32/Jadtre.B |
| Fortinet | W32/CoinMiner.EC2B!tr |
| GData | Win32.Virus.Wapomi.A |
| Detected | |
| Gridinsoft | Trojan.Heur!.03002201 |
| Ikarus | Virus.Win32.Wapomi |
| Jiangmin | Win32/Nimnul.f |
| K7AntiVirus | Virus ( 0040f7441 ) |
| K7GW | Virus ( 0040f7441 ) |
| Kaspersky | Virus.Win32.Nimnul.f |
| Kingsoft | Win32.Infected.AutoInfector.a |
| Lionic | Virus.Win32.Nimnul.m1R5 |
| Malwarebytes | Virus.Wapomi |
| MaxSecure | Virus.Nimnul.F |
| McAfeeD | Real Protect-LS!E74179BF5235 |
| MicroWorld-eScan | Win32.VJadtre.3 |
| Microsoft | Virus:Win32/Mikcer.B |
| NANO-Antivirus | Trojan.Win32.Banload.cstqaj |
| Paloalto | generic.ml |
| Panda | W32/Pcarrier.A |
| Rising | Virus.Wapomi!1.9E10 (CLASSIC) |
| Sangfor | Trojan.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win32.Infected.dm |
| Sophos | W32/Nimnul-A |
| Symantec | W32.Wapomi.C!inf |
| TACHYON | Virus/W32.Ramnit.C |
| Tencent | Virus.Win32.Loader.aab |
| TrellixENS | W32/Kudj |
| TrendMicro | PE_WAPOMI.BM |
| TrendMicro-HouseCall | PE_WAPOMI.BM |
| VBA32 | Virus.Nimnul.19209 |
| VIPRE | Win32.VJadtre.3 |
| Varist | W32/PatchLoad.E |
| ViRobot | Win32.Ramnit.F |
| VirIT | Win32.Nimnul.F |
| Xcitium | Virus.Win32.Wali.KA@558nxg |
| Zillya | Virus.Nimnul.Win32.5 |
| ZoneAlarm | W32/Nimnul-A |
| Zoner | Probably Heur.ExeHeaderL |
| alibabacloud | Virus:Win/Jadtre.A(dyn) |
| huorong | Virus/Jadtre.ax |