811326123c9b90d8932c4679c574afd2097496d883edc7ce6b0800afe90abe72

Classification: Malicious

811326123c9b90d8932c4679c574afd2097496d883edc7ce6b0800afe90abe72 is a malicious file sample. Reported by 2 threat sources, last seen 2026-09-02.

Detection summary

  • 80 antivirus detections
  • 1 IDS alerts
  • 0 processes observed
  • 1 contacted hosts
  • 0 DNS requests

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-09-02 16:45:05 2026-09-02 16:45:05 malicious-activity
MetaStealer ThreatFox Abuse.ch 2024-08-17 20:56:14 2024-08-19 20:21:44

Tags

win.metastealer evasive

Sample information

Filenames
811326123c9b90d8932c4679c574afd2097496d883edc7ce6b0800afe90abe72
File type
PE32 executable for MS Windows 5.01 (GUI), Intel i ...
MD5
209ae4a712ada48aa2d5fba027ed58b6
SHA-1
68d7a9260aba3859f6a5e59c2283635272ae8d09
SHA-256
811326123c9b90d8932c4679c574afd2097496d883edc7ce6b0800afe90abe72
First indexed
2024-08-17 21:17:05
Last updated
2026-09-02 16:45:05

Antivirus detections

EngineDetection
ALYacTrojan.GenericKD.68259489
APEXMalicious
AVGWin32:Meterpreter-C [Trj]
AlibabaTrojan:Win32/CobaltStrike.5c89
Antiy-AVLGrayWare/Win32.Tampering.a
ArcabitTrojan.Generic.D4118EA1
AvastWin32:Meterpreter-C [Trj]
AviraTR/Patched.Gen2
BitDefenderTrojan.GenericKD.68259489
BitDefenderThetaGen:NN.ZexaF.36810.eq1@aaZWcIai
BkavW32.AIDetectMalware
CAT-QuickHealTrojan.Swrort.A
CrowdStrikewin/malicious_confidence_100% (W)
Cybereasonmalicious.712ada
CylanceUnsafe
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
ESET-NOD32a variant of Win32/Rozena.AA
Elasticmalicious (high confidence)
EmsisoftTrojan.GenericKD.68259489 (B)
F-SecureTrojan.TR/Patched.Gen2
FireEyeGeneric.mg.209ae4a712ada48a
FortinetW32/Rozena.ABV!tr
GDataWin32.Trojan.PSE.12141ZK
GoogleDetected
GridinsoftTrojan.Win32.Swrort.zv!s2
IkarusTrojan.Win32.Swrort
K7AntiVirusTrojan ( 001172b51 )
K7GWTrojan ( 001172b51 )
KasperskyUDS:DangerousObject.Multi.Generic
LionicTrojan.Win32.Generic.4!c
MAXmalware (ai score=86)
MalwarebytesGeneric.Malware/Suspicious
McAfeeArtemis!209AE4A712AD
McAfeeDti!811326123C9B
MicroWorld-eScanTrojan.GenericKD.68259489
MicrosoftTrojan:Win32/Meterpreter.O
NANO-AntivirusTrojan.Win32.Metla.jtrsio
Paloaltogeneric.ml
PandaTrj/CI.A
RisingHackTool.Swrort!1.6477 (CLASSIC)
SangforTrojan.Win32.Meterpreter.Vr2v
SentinelOneStatic AI - Malicious SFX
SkyhighBehavesLike.Win32.Swrort.fh
SophosMal/Generic-S
SymantecTrojan.Gen.MBT
TencentWin32.Trojan.Cryptz.Fajl
TrendMicroBackdoor.Win32.COBEACON.SMJMAC
TrendMicro-HouseCallBackdoor.Win32.SWRORT.SMAL01
VBA32BScope.Trojan.VBS.Agent
VIPRETrojan.GenericKD.68259489
VaristW32/Swrort.A.gen!Eldorado
VirITTrojan.Win32.Rozena.AA
XcitiumTrojWare.Win32.Rozena.A@4jwdqr
YandexTrojan.Rosena.Gen.1
ZoneAlarmHEUR:Trojan.Win32.Generic
alibabacloudBackdoor:Win/shellcode.api(dyn)
huorongVirTool/Meterpreter.a
ALYacTrojan.Generic.38232067
Antiy-AVLTrojan/Win32.Rozena
ArcabitTrojan.Generic.D2476003
BitDefenderTrojan.Generic.38232067
CTXexe.trojan.swrort
EmsisoftTrojan.Generic.38232067 (B)
GDataWin32.Backdoor.Swrort.C
IkarusTrojan.Win32.Rozena
KingsoftWin32.Troj.Unknown.a
LionicTrojan.Win32.Swrort.4!c
MalwarebytesMalware.AI.4039204946
MaxSecureTrojan.Malware.7164915.susgen
MicroWorld-eScanTrojan.Generic.38232067
SangforSuspicious.Win32.Save.ins
SophosMal/EncPk-ACE
TencentWin32.Trojan.Metasploit_heur.Fajl
TrellixENSArtemis!209AE4A712AD
TrendMicro-HouseCallBackdoor.Win32.COBEACON.SMJMAC
VIPRETrojan.Generic.38232067
XcitiumMalware@#1xsilacnt9day
ZoneAlarmMal/EncPk-ACE
alibabacloudBackdoor:Win/CobaltStrike.reverse.A

Network contacts

193.117.208.148