krampusbooter-v4.3.exe
Classification: Malicious
krampusbooter-v4.3.exe is a potentially unwanted program (Windows 64-bit executable, 15.2 MB). Flagged by 8% of antivirus engines (17 detections).
Detection summary
- 17 antivirus detections (8% detection ratio)
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: LAZAGNE (S0349)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| HEUR:PSWTool.Python.LaZagne | Hybrid-Analysis | 2020-06-09 01:30:05 | 2020-06-09 01:30:05 | S0349 LaZagne |
Sample information
- Filenames
- krampusbooter-v4.3.exe
- File type
- PE32+ executable (console) x86-64, for MS Windows
- Size
- 15891636 bytes
- MD5
4b6f94530742d30b0e352074836b9378- SHA-1
3ec5e48e85a27b3c62de3df0e71e50cff1aa4a32- SHA-256
77e4435cdc8fcb5017dd5537f3b532e3d51a28b719d05227562a07f8787d344c- First indexed
- 2020-06-09 01:30:05
- Last updated
- 2026-09-23 19:52:57
Antivirus detections
| Engine | Detection |
|---|---|
| Kaspersky | not-a-virus:HEUR:PSWTool.Python.LaZagne.gen |
| Sophos | Generic PUA DO (PUA) |
| Fortinet | Riskware/LaZagne |
| ZoneAlarm | not-a-virus:HEUR:PSWTool.Python.LaZagne.gen |
| Microsoft | PUA:Win32/Presenoker |
| Qihoo-360 | Generic/Virus.PSW.bbc |
| APEX | Malicious |
| CAT-QuickHeal | Trojan.Riskware |
| Cylance | Unsafe |
| Cyren | W64/Trojan.OWZQ-7596 |
| K7AntiVirus | Riskware ( 0040eff71 ) |
| K7GW | Riskware ( 0040eff71 ) |
| Lionic | Riskware.Python.LaZagne.1!c |
| McAfee-GW-Edition | BehavesLike.Win64.Generic.wc |
| Paloalto | generic.ml |
| Sangfor | Malware |
| TrendMicro-HouseCall | TROJ_GEN.R002H07AO21 |