81325d0c1a73cad7402d2020c15304cba466ecc7919061cd16762f655019c038

Classification: Malicious

81325d0c1a73cad7402d2020c15304cba466ecc7919061cd16762f655019c038 is a malicious file sample. Reported by 1 threat source, last seen 2026-09-02.

Detection summary

  • 44 antivirus detections
  • 1 IDS alerts
  • 3 processes observed
  • 4 contacted hosts
  • 3 DNS requests

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2024-02-29 15:15:03 2026-09-02 16:45:04 malicious-activity

Tags

evasive infostealer windows-server-utility

Sample information

Filenames
81325d0c1a73cad7402d2020c15304cba466ecc7919061cd16762f655019c038, 2c816bef3cd7f3f367e6b94761c2bab2.exe
File type
PE32 executable (GUI) Intel 80386, for MS Windows
Size
245760 bytes
MD5
2c816bef3cd7f3f367e6b94761c2bab2
SHA-1
791c10407dd5df2abee9b87afa09306bd5d7d93c
SHA-256
81325d0c1a73cad7402d2020c15304cba466ecc7919061cd16762f655019c038
First indexed
2024-02-29 15:08:09
Last updated
2026-09-02 16:45:04

Antivirus detections

EngineDetection
APEXMalicious
AVGFileRepMalware [Cryp]
Acronissuspicious
AhnLab-V3Trojan/Win.Generic.C5595082
Antiy-AVLTrojan/Win32.Kryptik
ArcabitTrojan.Generic.D4477C10
AvastFileRepMalware [Cryp]
BitDefenderTrojan.GenericKD.71793680
BitDefenderThetaGen:NN.ZexaF.36744.pq0@ayW@9Nfi
BkavW32.AIDetectMalware
CrowdStrikewin/malicious_confidence_100% (W)
Cylanceunsafe
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
ESET-NOD32a variant of Win32/Kryptik.HWLE
Elasticmalicious (high confidence)
EmsisoftTrojan.GenericKD.71793680 (B)
FireEyeGeneric.mg.2c816bef3cd7f3f3
FortinetW32/Kryptik.HWLA!tr
GDataTrojan.GenericKD.71793680
GoogleDetected
IkarusTrojan.Win32.Crypt
K7AntiVirusRiskware ( 00584baa1 )
K7GWRiskware ( 00584baa1 )
KasperskyHEUR:Trojan-PSW.Win32.Vidar.gen
KingsoftWin32.Troj.Unknown.a
LionicTrojan.Win32.Vidar.i!c
MAXmalware (ai score=86)
MalwarebytesCrypt.Trojan.Malicious.DDS
McAfeeArtemis!2C816BEF3CD7
MicroWorld-eScanTrojan.GenericKD.71793680
MicrosoftTrojan:Win32/Vidar.AMMB!MTB
PandaTrj/Chgt.AD
Rising[email protected] (RDML:SgXYQ8th0xivXkMJtgayag)
SangforTrojan.Win32.Save.a
SentinelOneStatic AI - Malicious PE
SkyhighBehavesLike.Win32.Trojan.dc
SophosTroj/Krypt-ADH
SymantecPacked.Generic.525
Trapminemalicious.high.ml.score
TrendMicroTrojanSpy.Win32.VIDAR.YXEB3Z
TrendMicro-HouseCallTrojanSpy.Win32.VIDAR.YXEB3Z
ZoneAlarmHEUR:Trojan-PSW.Win32.Vidar.gen
tehtrisGeneric.Malware

Network contacts

149.154.167.99 23.59.200.146 192.229.211.108 95.217.28.14

DNS requests

t.me ocsp.digicert.com steamcommunity.com

Process list

NameCommand line
2c816bef3cd7f3f367e6b94761c2bab2.exe
WerFault.exe-u -p 6892 -s 2172
WerFault.exe-pss -s 464 -p 6892 -ip 6892