7fc6bc7f2cb710cf14da22c9e40b8407dbbe523ba7f8a91f8d67f5bce413d5c5

Classification: Malicious

7fc6bc7f2cb710cf14da22c9e40b8407dbbe523ba7f8a91f8d67f5bce413d5c5 is a malicious file sample. Reported by 2 threat sources, last seen 2026-09-02.

Detection summary

  • 44 antivirus detections
  • 1 IDS alerts
  • 4 processes observed
  • 4 contacted hosts
  • 3 DNS requests

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2024-09-18 03:15:09 2026-09-02 14:45:05 malicious-activity
Vidar ThreatFox Abuse.ch 2024-09-15 20:42:52 2024-09-17 20:19:05

Tags

win.vidar evasive infostealer

Sample information

Filenames
7fc6bc7f2cb710cf14da22c9e40b8407dbbe523ba7f8a91f8d67f5bce413d5c5, 7fc6b.Stealer.exe
File type
PE32 executable (console) Intel 80386 Mono/.Net as ...
Size
290344 bytes
MD5
c252b6cf66b0de7e3b34c180bab3b0fa
SHA-1
cba15dad617651223885f6c032b65cd598dcce5c
SHA-256
7fc6bc7f2cb710cf14da22c9e40b8407dbbe523ba7f8a91f8d67f5bce413d5c5
First indexed
2024-09-15 21:17:06
Last updated
2026-09-02 14:45:05

Antivirus detections

EngineDetection
APEXMalicious
AVGWin32:PWSX-gen [Trj]
AhnLab-V3Trojan/Win.Generic.C5670639
AlibabaTrojanSpy:MSIL/Stealer.f5db6e38
ArcabitTrojan.MSILHeracles.D2BE19
AvastWin32:PWSX-gen [Trj]
AviraTR/AD.Stealc.hjqcx
BitDefenderGen:Variant.MSILHeracles.179737
BkavW32.AIDetectMalware.CS
CTXexe.trojan.msil
CrowdStrikewin/malicious_confidence_90% (D)
CylanceUnsafe
DeepInstinctMALICIOUS
ESET-NOD32a variant of MSIL/GenKryptik.HBHS
Elasticmalicious (high confidence)
EmsisoftGen:Variant.MSILHeracles.179737 (B)
F-SecureTrojan.TR/AD.Stealc.hjqcx
FireEyeGeneric.mg.c252b6cf66b0de7e
FortinetMSIL/GenKryptik.HBHS!tr
GDataWin32.Trojan.Kryptik.YCF8Y2
GoogleDetected
GridinsoftSpy.Win32.Vidar.tr
IkarusTrojan-Spy.LummaStealer
KasperskyHEUR:Trojan-Spy.MSIL.Stealer.gen
KingsoftMSIL.Trojan-Spy.Stealer.gen
LionicTrojan.Win32.Stealer.12!c
McAfeeArtemis!C252B6CF66B0
McAfeeDti!7FC6BC7F2CB7
MicroWorld-eScanGen:Variant.MSILHeracles.179737
MicrosoftTrojan:Win32/Wacatac.B!ml
Paloaltogeneric.ml
PandaTrj/Chgt.AD
RisingStealer.Agent!8.C2 (CLOUD)
SangforInfostealer.Msil.Agent.Vgl1
SkyhighArtemis!Trojan
SophosMal/Generic-S
SymantecML.Attribute.HighConfidence
TencentWin32.Trojan.FalseSign.Cujl
TrendMicroTrojan.Win32.PRIVATELOADER.YXEIOZ
TrendMicro-HouseCallTrojan.Win32.PRIVATELOADER.YXEIOZ
VIPREGen:Variant.MSILHeracles.179737
ZoneAlarmHEUR:Trojan-Spy.MSIL.Stealer.gen
alibabacloudTrojan[spy]:MSIL/Wacatac.B9nj
huorongTrojan/MSIL.Agent.li

Network contacts

149.154.167.99 192.124.249.36 192.124.249.41 91.107.146.245

DNS requests

crl.godaddy.com ocsp.godaddy.com t.me

Process list

NameCommand line
7fc6b.Stealer.exe
RegAsm.exe
cmd.exe/c timeout /t 10 & del /f /q "%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe" & rd /s /q "%ALLUSERSPROFILE%\IIJKJDAFHJDH" & exit
timeout.exetimeout /t 10