Classification: Malicious
me.exe is a trojan (Windows executable, 45.0 KB). Flagged by 79% of antivirus engines (51 detections). Linked to Stealbit malware.
Detection summary
- 51 antivirus detections (79% detection ratio)
- 1 IDS alerts
- 1 processes observed
- 1 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Generic Malware |
Hybrid-Analysis |
2023-04-20 08:15:04 |
2026-04-16 15:45:05 |
|
|
| StealBit |
MalwareBazaar Abuse.ch |
2022-03-03 01:53:29 |
2022-03-03 01:53:29 |
malicious-activity
|
S1200 StealBit
|
| Generic.Malware |
MalwareBazaar Abuse.ch |
2022-03-03 01:53:29 |
2022-03-03 01:53:29 |
malicious-activity
|
|
Sample information
- Filenames
- me.exe, StealBit.exe, 6b795d9faa48ce3ae31f0bde3dcb61a6d738e8cc0e29b5949d93a5c8ee74786a
- File type
- PE32 executable (GUI) Intel 80386, for MS Windows
- Size
- 46080 bytes
- MD5
d7157c810238f288913e2df0b9ff5a08- SHA-1
bfbc577800252ffb5ca3aa101463c7c91a2a9540- SHA-256
6b795d9faa48ce3ae31f0bde3dcb61a6d738e8cc0e29b5949d93a5c8ee74786a- First indexed
- 2022-03-03 03:15:08
- Last updated
- 2026-09-16 19:45:00
Antivirus detections
| Engine | Detection |
|---|
| Lionic | Trojan.Win32.Lazy.4!c |
| Elastic | malicious (high confidence) |
| MicroWorld-eScan | Gen:Variant.Lazy.92877 |
| ClamAV | Win.Malware.Lazy-9964726-0 |
| FireEye | Generic.mg.d7157c810238f288 |
| McAfee | GenericRXQG-EI!D7157C810238 |
| Cylance | unsafe |
| Zillya | Trojan.AgentAGen.Win32.388 |
| Sangfor | Trojan.Win32.Lazy.Vb5l |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Alibaba | Trojan:Win32/Corrempa.ab41ce52 |
| K7AntiVirus | Trojan ( 0058afab1 ) |
| Symantec | ML.Attribute.HighConfidence |
| tehtris | Generic.Malware |
| ESET-NOD32 | a variant of Win32/Agent_AGen.IQ |
| APEX | Malicious |
| Paloalto | generic.ml |
| Cynet | Malicious (score: 100) |
| Kaspersky | Trojan.Win32.Agent.xalmzh |
| BitDefender | Gen:Variant.Lazy.92877 |
| NANO-Antivirus | Virus.Win32.Gen.ccmw |
| Avast | FileRepMalware [Misc] |
| Sophos | ML/PE-A |
| DrWeb | Trojan.Packed.928 |
| VIPRE | Gen:Variant.Lazy.92877 |
| TrendMicro | WORM_STRAT.GEN-3 |
| McAfee-GW-Edition | GenericRXQG-EI!D7157C810238 |
| Trapmine | malicious.high.ml.score |
| Emsisoft | Gen:Variant.Lazy.92877 (B) |
| SentinelOne | Static AI - Suspicious PE |
| Jiangmin | Trojan.Agent.dtxn |
| Webroot | W32.Trojan.Stealbit |
| Avira | TR/Crypt.XPACK.Gen |
| MAX | malware (ai score=89) |
| Antiy-AVL | Trojan/Win32.Generic |
| Gridinsoft | Ransom.Win32.Agent.bot!se40918 |
| Arcabit | Trojan.Lazy.D16ACD |
| ViRobot | Trojan.Win32.Z.Lazy.46080 |
| GData | Gen:Variant.Lazy.92877 |
| Google | Detected |
| BitDefenderTheta | AI:Packer.DD260F971D |
| ALYac | Gen:Variant.Lazy.92877 |
| VBA32 | Trojan.Packed |
| Malwarebytes | Malware.AI.4249226812 |
| TrendMicro-HouseCall | WORM_STRAT.GEN-3 |
| Tencent | Win32.Trojan.Agent.Ckjl |
| Ikarus | Trojan-Ransom.StealBit |
| MaxSecure | Trojan.Malware.109653022.susgen |
| Fortinet | W32/Agent_AGen.IQ!tr |
| AVG | FileRepMalware [Misc] |
| Panda | Generic Suspicious |
Process list
| Name | Command line |
|---|
| 6b795d9faa48ce3ae31f0bde3dcb61a6d738e8cc0e29b5949d93a5c8ee74786a.exe | |