811a8a070c378c06d99c7d719dd149ba3af15124cbcdb3d1e42dc56238dc022e

Classification: Malicious

811a8a070c378c06d99c7d719dd149ba3af15124cbcdb3d1e42dc56238dc022e is a malicious file sample. Reported by 2 threat sources, last seen 2026-09-02.

Detection summary

  • 77 antivirus detections
  • 1 IDS alerts
  • 0 processes observed
  • 2 contacted hosts
  • 2 DNS requests

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-09-02 16:45:05 2026-09-02 16:45:05 malicious-activity
Generic.Malware MalwareBazaar Abuse.ch 2024-01-31 11:28:58 2024-01-31 11:28:58 malicious-activity

Tags

evasive infostealer malicious ransomware

Sample information

Filenames
811a8a070c378c06d99c7d719dd149ba3af15124cbcdb3d1e42dc56238dc022e, c110453bcf012eb83207e03d4e514e76
File type
application/x-dosexec
MD5
c110453bcf012eb83207e03d4e514e76
SHA-1
6f74c416c8e72a46133173a2215b298d0c94bf42
SHA-256
811a8a070c378c06d99c7d719dd149ba3af15124cbcdb3d1e42dc56238dc022e
First indexed
2024-01-31 12:18:26
Last updated
2026-09-02 16:45:05

Antivirus detections

EngineDetection
ALYacGen:Variant.Ransom.Loki.2963
APEXMalicious
AVGFileRepMalware [Misc]
ArcabitTrojan.Ransom.Loki.DB93
AvastFileRepMalware [Misc]
BitDefenderGen:Variant.Ransom.Loki.2963
BitDefenderThetaGen:NN.ZemsilF.36680.3m0@ayBM2o
CrowdStrikewin/malicious_confidence_100% (W)
Cybereasonmalicious.6c8e72
Cylanceunsafe
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
Elasticmalicious (high confidence)
EmsisoftGen:Variant.Ransom.Loki.2963 (B)
FireEyeGeneric.mg.c110453bcf012eb8
FortinetMSIL/Kryptik.AJMV!tr
GDataGen:Variant.Ransom.Loki.2963
GoogleDetected
IkarusTrojan.MSIL.Krypt
KasperskyUDS:DangerousObject.Multi.Generic
Kingsoftmalware.kb.c.1000
LionicTrojan.Win32.Generic.4!c
MAXmalware (ai score=86)
MalwarebytesMachineLearning/Anomalous.95%
MaxSecureTrojan.Malware.300983.susgen
McAfeeAgentTesla-FCSO!C110453BCF01
MicroWorld-eScanGen:Variant.Ransom.Loki.2963
MicrosoftTrojan:Win32/Wacatac.B!ml
RisingMalware.Obfus/[email protected] (RDM.MSIL2:0ulKfgXqzCprCSprfRb7tQ)
SangforSuspicious.Win32.Save.a
SentinelOneStatic AI - Malicious PE
SkyhighBehavesLike.Win32.Generic.cc
SophosML/PE-A
SymantecScr.Malcode!gdn33
Trapminemalicious.moderate.ml.score
VBA32CIL.StupidPInvoker-1.Heur
VIPREGen:Variant.Ransom.Loki.2963
VaristW32/MSIL_Kryptik.IKV.gen!Eldorado
VirITTrojan.Win32.MSIL_Heur.A
ZoneAlarmUDS:DangerousObject.Multi.Generic
tehtrisGeneric.Malware
AVGWin32:MalwareX-gen [Trj]
AhnLab-V3Malware/Win.FCSO.C5582066
AlibabaTrojan:MSIL/AveMariaRAT.c7abf84a
Antiy-AVLTrojan/MSIL.GenKryptik
AvastWin32:MalwareX-gen [Trj]
AviraHEUR/AGEN.1374367
BkavW32.AIDetectMalware.CS
CAT-QuickHealTrojan.Ghanarava.1728556838514e76
CTXexe.trojan.msil
CylanceUnsafe
DrWebTrojan.Siggen32.17159
ESET-NOD32MSIL/GenKryptik.GTHF trojan
F-SecureHeuristic.HEUR/AGEN.1374367
FortinetMSIL/Formbook.AJOF!tr
IkarusTrojan.MSIL.Crypt
K7AntiVirusTrojan ( 005ed8e51 )
K7GWTrojan ( 005ed8e51 )
KasperskyHEUR:Trojan.MSIL.Taskun.gen
LionicTrojan.Win32.Taskun.4!c
MalwarebytesMalware.AI.1932586175
MaxSecureTrojan.Malware.74644571.susgen
McAfeeDReal Protect-LS!C110453BCF01
MicrosoftTrojan:MSIL/AveMariaRAT.Q!MTB
Paloaltogeneric.ml
PandaTrj/Chgt.AD
RisingMalware.Obfus/[email protected] (RDM.MSIL2:0ulKfgXqzCprCSprfRb7tQ)
SophosMal/Generic-S
TencentMalware.Win32.Gencirc.13ffa16e
TrellixENSAgentTesla-FCSO!C110453BCF01
TrendMicro-HouseCallTrojan.Win32.VSX.PE04C9z
WebrootW32.Trojan.Gen
XcitiumMalware@#2p4fn0kjimwj7
YandexTrojan.Taskun!HyGDTJUg+NY
ZillyaTrojan.GenKryptik.Win32.462697
alibabacloudRansomWare:Win/Loki
huorongHEUR:VirTool/MSIL.Obfuscator.gen!A

Network contacts

104.26.12.205 179.43.183.46

DNS requests

api.ipify.org mail.officeemailbackup.com