Quote.exe
Classification: Malicious
Quote.exe is a trojan (Windows executable). Detected by 50 antivirus engines. Linked to Darktortilla malware. 8 sightings, last seen 2026-04-03.
Detection summary
- 50 antivirus detections
- 2 IDS alerts
- 0 processes observed
- 2 contacted hosts
- 2 DNS requests
MITRE ATT&CK associations
Malware families: DARKTORTILLA (S1066)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-04-03 10:45:07 | 2026-04-03 10:45:07 | ||
| Phantom_stealer | Triage | 2026-04-03 09:37:44 | 2026-04-03 09:37:44 | malicious-activity | |
| DarkTortilla | MalwareBazaar Abuse.ch | 2026-04-03 09:35:10 | 2026-04-03 09:35:10 | malicious-activity | S1066 DarkTortilla |
Tags
phantom_stealer collection discovery persistence stealer windows-server-utilitySample information
- Filenames
- Quote.exe, 7754fc3ae79dd10fdb5f3a04251eb2e87ecf281597c058b27ae852083cf71ab4.bin, _7754fc3ae79dd10fdb5f3a04251eb2e87ecf281597c058b27ae852083cf71ab4.exe
- File type
- PE32 executable for MS Windows 4.00 (GUI), Intel i ...
- MD5
3b9ed3e8ff3d78eb830a0b1b1ddce8c6- SHA-1
6cdd5534239367863740c493e219129208c8ea63- SHA-256
7754fc3ae79dd10fdb5f3a04251eb2e87ecf281597c058b27ae852083cf71ab4- First indexed
- 2026-04-03 09:35:10
- Last updated
- 2026-09-30 18:55:54
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.GenericKD.80001240 |
| APEX | Malicious |
| AhnLab-V3 | Trojan/Win.Formbook.X2183 |
| Alibaba | Backdoor:MSIL/Kryptik.60de7bdf |
| Antiy-AVL | Trojan[Backdoor]/MSIL.XWorm |
| Arcabit | Trojan.Generic.D4C4B8D8 |
| BitDefender | Trojan.GenericKD.80001240 |
| CTX | exe.trojan.msil |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.KillProc2.40129 |
| ESET-NOD32 | MSIL/Kryptik.APYU trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Trojan.GenericKD.80001240 (B) |
| F-Secure | Trojan.TR/W32.MalwareX |
| Fortinet | MSIL/AgentTesla.I!tr |
| GData | Trojan.GenericKD.80001240 |
| Detected | |
| Ikarus | Trojan.MSIL.Crypt |
| K7AntiVirus | Trojan ( 700000201 ) |
| K7GW | Trojan ( 700000201 ) |
| Kaspersky | HEUR:Backdoor.MSIL.XWorm.gen |
| Kingsoft | MSIL.Backdoor.XWorm.gen |
| Lionic | Trojan.Win32.XWorm.m!c |
| Malwarebytes | Trojan.Crypt.MSIL |
| MaxSecure | Trojan.Malware.111087117.susgen |
| McAfeeD | Trojan:Win/DarkTortilla.NEA |
| MicroWorld-eScan | Trojan.GenericKD.80001240 |
| Microsoft | PWS:MSIL/Browsstl!rfn |
| Paloalto | generic.ml |
| Panda | Trj/Agent.ASH |
| Rising | Malware.Obfus/[email protected] (RDM.MSIL2:ZYWNREVSLY+c5j+t9yGYqw) |
| Sangfor | Backdoor.Msil.Kryptik.Vepe |
| SentinelOne | Static AI - Malicious PE |
| Sophos | Mal/Generic-S |
| Symantec | ML.Attribute.HighConfidence |
| Tencent | Malware.Win32.Gencirc.10c46a10 |
| TrellixENS | Artemis!3B9ED3E8FF3D |
| TrendMicro-HouseCall | Trojan.Win32.VSX.PE04CA1 |
| VBA32 | Malware-Cryptor.MSIL.AgentTesla.Heur |
| VIPRE | Trojan.GenericKD.80001240 |
| Varist | W32/MSIL_Agent.KBL.gen!Eldorado |
| ViRobot | Trojan.Win.Z.Agent.1855488.BL |
| VirIT | Trojan.Win32.MSIL.JMG |
| Yandex | Trojan.Igent.b6iNka.4 |
| Zillya | Trojan.Basic.Win32.155988 |
| ZoneAlarm | Mal/Generic-L |
| alibabacloud | Backdoor:MSIL/XWorm.gyf |
| huorong | Trojan/MSIL.Injector.nj |