809eb1d1bdcff5bb14490f0d73e191f317b88522d56273e093e5a7767a08ddee
Classification: Malicious
809eb1d1bdcff5bb14490f0d73e191f317b88522d56273e093e5a7767a08ddee is a malicious file sample. Reported by 1 threat source, last seen 2026-09-02.
Detection summary
- 14 antivirus detections
- 0 IDS alerts
- 1 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Generic Malware |
Hybrid-Analysis |
2024-03-05 14:30:03 |
2026-09-02 15:45:03 |
malicious-activity
|
|
Sample information
- Filenames
- 809eb1d1bdcff5bb14490f0d73e191f317b88522d56273e093e5a7767a08ddee, Forskergruppen.exe
- File type
- PE32 executable (GUI) Intel 80386, for MS Windows, ...
- Size
- 597968 bytes
- MD5
175ece9bb7514e64182597b5faadc743- SHA-1
62dae5e1499751947647957df43005e01ffa8611- SHA-256
809eb1d1bdcff5bb14490f0d73e191f317b88522d56273e093e5a7767a08ddee- First indexed
- 2024-03-05 14:17:01
- Last updated
- 2026-09-02 15:45:04
Antivirus detections
| Engine | Detection |
|---|
| AVG | NSIS:MalwareX-gen [Trj] |
| Avast | NSIS:MalwareX-gen [Trj] |
| Bkav | W32.AIDetectMalware |
| CrowdStrike | win/grayware_confidence_60% (D) |
| Cylance | unsafe |
| Cynet | Malicious (score: 100) |
| ESET-NOD32 | NSIS/Injector.CJP |
| Elastic | malicious (high confidence) |
| Google | Detected |
| Ikarus | Trojan.NSIS.Agent |
| Kaspersky | HEUR:Trojan.Win32.GuLoader.gen |
| Microsoft | Trojan:Win32/Sonbokli.A!cl |
| Varist | W32/Ninjector.MA.gen!Eldorado |
| ZoneAlarm | HEUR:Trojan.Win32.GuLoader.gen |
Process list
| Name | Command line |
|---|
| Forskergruppen.exe | |