7f2fe5629a1ee29108e48297ad91a499c84e95d54add661a8fc8ff8f112a0243

Classification: Malicious

7f2fe5629a1ee29108e48297ad91a499c84e95d54add661a8fc8ff8f112a0243 is a malicious file sample. Reported by 1 threat source, last seen 2026-09-02.

Detection summary

  • 32 antivirus detections (44% detection ratio)
  • 2 IDS alerts
  • 1 processes observed
  • 2 contacted hosts
  • 1 DNS requests

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2023-10-12 13:24:38 2026-09-02 13:45:04 malicious-activity

Sample information

Filenames
7f2fe5629a1ee29108e48297ad91a499c84e95d54add661a8fc8ff8f112a0243, Remittance slip 060223.exe
File type
PE32 executable (GUI) Intel 80386 Mono/.Net assemb ...
Size
300544 bytes
MD5
b88856121960fb92be6942015f55ce7c
SHA-1
b4c987ae0045332070e6650d73dca8dc6bc929f2
SHA-256
7f2fe5629a1ee29108e48297ad91a499c84e95d54add661a8fc8ff8f112a0243
First indexed
2023-10-12 13:05:56
Last updated
2026-09-02 13:45:04

Antivirus detections

EngineDetection
LionicTrojan.Win32.Agensla.4!c
tehtrisGeneric.Malware
SkyhighBehavesLike.Win32.Generic.dm
McAfeeArtemis!B88856121960
Cylanceunsafe
BitDefenderThetaGen:NN.ZemsilF.36738.sm0@aitLE3i
SymantecMSIL.Downloader!gen8
Elasticmalicious (high confidence)
ESET-NOD32a variant of MSIL/Kryptik_AGen.BLC
APEXMalicious
CynetMalicious (score: 100)
KasperskyUDS:Trojan-PSW.MSIL.Agensla.gen
AvastWin32:DropperX-gen [Drp]
F-SecureHeuristic.HEUR/AGEN.1323343
Trapminesuspicious.low.ml.score
SophosMal/Generic-S
SentinelOneStatic AI - Malicious PE
GoogleDetected
AviraHEUR/AGEN.1323343
Kingsoftmalware.kb.c.996
MicrosoftTrojan:Win32/AgentTesla!ml
GridinsoftTrojan.Win32.Agent.sa
ZoneAlarmHEUR:Trojan-PSW.MSIL.Agensla.gen
VaristW32/MSIL_Agent.GIL.gen!Eldorado
MalwarebytesMalware.AI.2281866137
TrendMicro-HouseCallTROJ_FRS.VSNTJC23
RisingTrojan.Kryptik!8.8 (CLOUD)
IkarusTrojan.MSIL.Inject
MaxSecureTrojan.Malware.300983.susgen
AVGWin32:DropperX-gen [Drp]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_70% (W)

Network contacts

43.250.54.126 92.118.112.4

DNS requests

qu.ax

Process list

NameCommand line
Remittanceslip060223.exe