7faed0854cbdada8669f6c3c22c805f73aed5e5f86d68324ca42854199efcf84
Classification: Malicious
7faed0854cbdada8669f6c3c22c805f73aed5e5f86d68324ca42854199efcf84 is a malicious file sample. Reported by 3 threat sources, last seen 2026-09-02.
Detection summary
- 47 antivirus detections (65% detection ratio)
- 1 IDS alerts
- 9 processes observed
- 1 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Generic Malware |
Hybrid-Analysis |
2023-11-27 19:45:03 |
2026-09-02 14:45:06 |
malicious-activity
|
|
| Backdoor |
VM-Ray |
2023-11-27 20:22:53 |
2023-11-27 20:22:53 |
|
|
| AsyncRAT |
MalwareBazaar Abuse.ch |
2023-11-27 19:20:05 |
2023-11-27 19:20:05 |
malicious-activity
|
|
Sample information
- Filenames
- 7faed0854cbdada8669f6c3c22c805f73aed5e5f86d68324ca42854199efcf84, A937A9815803CE5E3C27A07A4B5F36C1.exe
- File type
- PE32 executable (GUI) Intel 80386 Mono/.Net assemb ...
- Size
- 551936 bytes
- MD5
a937a9815803ce5e3c27a07a4b5f36c1- SHA-1
be22a3bddcf5a5b4094a1a772f77d5d0363bb73d- SHA-256
7faed0854cbdada8669f6c3c22c805f73aed5e5f86d68324ca42854199efcf84- First indexed
- 2023-11-27 19:25:07
- Last updated
- 2026-09-02 14:45:06
Antivirus detections
| Engine | Detection |
|---|
| Lionic | Trojan.Win32.Crysan.m!c |
| DrWeb | Trojan.Inject4.59820 |
| MicroWorld-eScan | Generic.Dacic.BAD49D2A.A.02F58036 |
| Skyhigh | BehavesLike.Win32.Generic.hc |
| McAfee | PWS-FDBP!A937A9815803 |
| Cylance | unsafe |
| Sangfor | Suspicious.Win32.Save.a |
| Alibaba | TrojanPSW:MSIL/AgentTesla.a7e40d44 |
| Arcabit | Generic.Dacic.BAD49D2A.A.02F58036 |
| VirIT | Trojan.Win32.MSIL_Heur.A |
| Symantec | Scr.Malcode!gdn33 |
| Elastic | malicious (high confidence) |
| ESET-NOD32 | a variant of MSIL/Kryptik.AKFQ |
| Cynet | Malicious (score: 100) |
| APEX | Malicious |
| Kaspersky | HEUR:Trojan-PSW.MSIL.Agensla.gen |
| BitDefender | Generic.Dacic.BAD49D2A.A.02F58036 |
| NANO-Antivirus | Trojan.Win32.Agensla.kegusz |
| Avast | Win32:PWSX-gen [Trj] |
| Emsisoft | Generic.Dacic.BAD49D2A.A.02F58036 (B) |
| F-Secure | Trojan.TR/Kryptik.gnaia |
| VIPRE | Generic.Dacic.BAD49D2A.A.02F58036 |
| TrendMicro | Backdoor.Win32.ASYNCRAT.YXDKXZ |
| FireEye | Generic.Dacic.BAD49D2A.A.02F58036 |
| Sophos | Troj/Krypt-ABH |
| SentinelOne | Static AI - Malicious PE |
| Varist | W32/MSIL_Agent.GYN.gen!Eldorado |
| Avira | TR/Kryptik.gnaia |
| MAX | malware (ai score=80) |
| Antiy-AVL | Trojan[Backdoor]/MSIL.Crysan |
| Gridinsoft | Ransom.Win32.Wacatac.sa |
| Microsoft | Trojan:MSIL/AgentTesla.AMBQ!MTB |
| ZoneAlarm | HEUR:Trojan-PSW.MSIL.Agensla.gen |
| GData | Win32.Trojan.Agent.BUP5SN |
| Google | Detected |
| AhnLab-V3 | Trojan/Win.MSILZilla.C5549676 |
| ALYac | Generic.Dacic.BAD49D2A.A.02F58036 |
| Malwarebytes | Trojan.MalPack.PNG.Generic |
| Panda | Trj/Chgt.AD |
| TrendMicro-HouseCall | Backdoor.Win32.ASYNCRAT.YXDKXZ |
| Rising | Malware.Obfus/[email protected] (RDM.MSIL2:+8rFCojIxl8ytGZZuCEjPA) |
| Ikarus | Trojan.MSIL.Inject |
| MaxSecure | Trojan.Malware.74499699.susgen |
| Fortinet | MSIL/Kryptik.AKEC!tr |
| AVG | Win32:PWSX-gen [Trj] |
| DeepInstinct | MALICIOUS |
| CrowdStrike | win/malicious_confidence_100% (W) |
Process list
| Name | Command line |
|---|
| A937A9815803CE5E3C27A07A4B5F36C1.exe | |
| powershell.exe | Add-MpPreference -ExclusionPath "%APPDATA%\vAJjcocrR.exe" |
| schtasks.exe | /Create /TN "Updates\vAJjcocrR" /XML "%TEMP%\tmp19A4.tmp" |
| A937A9815803CE5E3C27A07A4B5F36C1.exe | |
| vAJjcocrR.exe | |
| powershell.exe | Add-MpPreference -ExclusionPath "%APPDATA%\vAJjcocrR.exe" |
| schtasks.exe | /Create /TN "Updates\vAJjcocrR" /XML "%TEMP%\tmp6A2C.tmp" |
| vAJjcocrR.exe | |
| vAJjcocrR.exe | |