7dba26d2529748088ba90c7c3b0d374649ac3b2efb2380608b7b5f012993f82a

Classification: Malicious

7dba26d2529748088ba90c7c3b0d374649ac3b2efb2380608b7b5f012993f82a is a malicious file sample. Linked to Remcos malware. Detected by 57 antivirus engines.

Detection summary

  • 57 antivirus detections
  • 0 IDS alerts
  • 1 processes observed
  • 1 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: REMCOS (S0332)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2024-10-03 07:45:04 2026-09-02 11:45:04 malicious-activity
RemcosRAT MalwareBazaar Abuse.ch 2024-10-03 07:25:10 2024-10-03 07:25:10 malicious-activity S0332 Remcos

Sample information

Filenames
7dba26d2529748088ba90c7c3b0d374649ac3b2efb2380608b7b5f012993f82a, 17279403077f885c827960b6e8c87068d24f6ff15ba15cc4b7b6b413aafc09161cfef75b30571.dat-decod, 17279403077f885c827960b6e8c87068d24f6ff15ba15cc4b7b6b413aafc09161cfef75b30571.dat-decoded
File type
PE32 executable (GUI) Intel 80386, for MS Windows
Size
494080 bytes
MD5
f055c74729b56c8a7147af1ef0526932
SHA-1
8b85b9046049f7c0e8b93b0ba2b9351e58a07f98
SHA-256
7dba26d2529748088ba90c7c3b0d374649ac3b2efb2380608b7b5f012993f82a
First indexed
2024-10-03 07:29:26
Last updated
2026-09-02 11:45:04

Antivirus detections

EngineDetection
ALYacGeneric.Remcos.3C079F21
APEXMalicious
AVGWin32:RATX-gen [Trj]
AhnLab-V3Backdoor/Win.Remcos.R634199
Antiy-AVLTrojan[Backdoor]/Win32.Rescoms.b
ArcabitGeneric.Remcos.3C079F21
AvastWin32:RATX-gen [Trj]
AviraBDS/Backdoor.Gen
BaiduWin32.Trojan.Kryptik.awm
BitDefenderGeneric.Remcos.3C079F21
BkavW32.AIDetectMalware
CTXexe.unknown.remcos
ClamAVWin.Trojan.Remcos-9841897-0
CrowdStrikewin/malicious_confidence_100% (D)
CylanceUnsafe
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
DrWebBackDoor.Remcos.438
ESET-NOD32a variant of Win32/Rescoms.B
ElasticWindows.Trojan.Remcos
EmsisoftGeneric.Remcos.3C079F21 (B)
F-SecureBackdoor.BDS/Backdoor.Gen
FireEyeGeneric.mg.f055c74729b56c8a
FortinetW32/Rescoms.U!tr
GDataGeneric.Remcos.3C079F21
GoogleDetected
IkarusBackdoor.Remcos
JiangminBackdoor.Remcos.dzw
K7AntiVirusTrojan ( 0053ac2c1 )
K7GWTrojan ( 0053ac2c1 )
KasperskyHEUR:Backdoor.Win32.Remcos.gen
Kingsoftmalware.kb.a.1000
MalwarebytesGeneric.Malware.AI.DDS
MaxSecureTrojan.Malware.121218.susgen
McAfeeRemcos-FDQO!F055C74729B5
McAfeeDReal Protect-LS!F055C74729B5
MicroWorld-eScanGeneric.Remcos.3C079F21
MicrosoftBackdoor:Win32/Remcos.GA!MTB
NANO-AntivirusTrojan.Win32.Rescoms.kqldxd
PandaTrj/Genetic.gen
RisingBackdoor.Remcos!1.BAC7 (CLASSIC)
SUPERAntiSpywareTrojan.Agent/Gen-Crypt
SentinelOneStatic AI - Malicious PE
SkyhighBehavesLike.Win32.Remcos.gh
SophosMal/Remcos-B
SymantecML.Attribute.HighConfidence
TencentTrojan.Win32.Remcos.16001234
VBA32BScope.Backdoor.Remcos
VIPREGeneric.Remcos.3C079F21
VaristW32/Trojan.TEVC-5559
VirITTrojan.Win32.Remcos.HCY
WebrootW32.Trojan.Remcos
YandexTrojan.Rescoms!PSu4l5XLhE8
ZillyaTrojan.Rescoms.Win32.1913
ZoneAlarmHEUR:Backdoor.Win32.Remcos.gen
alibabacloudBackdoor:Win/Remcos
huorongBackdoor/Remcos.k

Network contacts

212.162.149.163

Process list

NameCommand line
17279403077f885c827960b6e8c87068d24f6ff15ba15cc4b7b6b413aafc09161cfef75b30571.dat-decod.exe