sub_6675c2048444.bin

Classification: Malicious

sub_6675c2048444.bin is a malicious file sample (Windows executable, 766.0 KB). Linked to Egregor malware. Reported by 2 threat sources, last seen 2026-05-24.

Detection summary

  • 0 antivirus detections (78% detection ratio)
  • 0 IDS alerts
  • 3 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: EGREGOR (S0554)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Egregor Triage 2026-05-24 02:03:15 2026-05-24 02:03:15 malicious-activity S0554 Egregor
Gen:Variant.Zusy Hybrid-Analysis 2020-12-04 12:00:13 2020-12-04 12:00:13

Tags

gozi isfb papras ursnif egregor discovery ransomware

Sample information

Filenames
sub_6675c2048444.bin, file
File type
PE32 executable (DLL) (GUI) Intel 80386, for MS Wi ...
Size
784384 bytes
MD5
d16a62fa072bbbf84aee0be82e6850a3
SHA-1
a6259615ea10c30421e83d20f4a4b5f2c41b45b8
SHA-256
6675c204844476dd8ce59ead0eac082754ded599036551526a8e2c509a1407e4
First indexed
2020-12-04 12:00:13
Last updated
2026-08-02 03:27:22

Process list

NameCommand line
<Ignored Process>
rundll32.exe"C:\file.dll",#1
rundll32.exe"C:\file.dll",#3