81bf768acea7ddb59271eb30abb6424c385cd85a4f53e6e15d555bcf2cb3f5cb
Classification: Malicious
81bf768acea7ddb59271eb30abb6424c385cd85a4f53e6e15d555bcf2cb3f5cb is a malicious file sample. Reported by 2 threat sources, last seen 2026-09-02.
Detection summary
- 70 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Generic Malware |
Hybrid-Analysis |
2026-09-02 17:45:05 |
2026-09-02 17:45:05 |
malicious-activity
|
|
| Generic.Malware |
MalwareBazaar Abuse.ch |
2024-09-07 12:29:51 |
2024-09-07 12:29:51 |
malicious-activity
|
|
Sample information
- Filenames
- 81bf768acea7ddb59271eb30abb6424c385cd85a4f53e6e15d555bcf2cb3f5cb, Trojan.Danger.ATA_virussign.com_b185afd8a6f51a84fdd8f5d772204614.exe
- File type
- application/x-dosexec
- MD5
b185afd8a6f51a84fdd8f5d772204614- SHA-1
5f1a5fbf7778d8d4adf10ea39f37a085567f1a25- SHA-256
81bf768acea7ddb59271eb30abb6424c385cd85a4f53e6e15d555bcf2cb3f5cb- First indexed
- 2024-09-07 13:23:55
- Last updated
- 2026-09-02 17:45:05
Antivirus detections
| Engine | Detection |
|---|
| ALYac | Trojan.GenericKD.67166905 |
| APEX | Malicious |
| AVG | Win32:RansomX-gen [Ransom] |
| Acronis | suspicious |
| AhnLab-V3 | Trojan/Win32.Cosmu.R51515 |
| Alibaba | Trojan:Win32/Cosmu.1603 |
| Antiy-AVL | Trojan/Win32.Cosmu |
| Arcabit | Trojan.Generic.D400E2B9 |
| Avast | Win32:RansomX-gen [Ransom] |
| Avira | TR/ATRAPS.Gen |
| BitDefender | Trojan.GenericKD.67166905 |
| Bkav | W32.AIDetectMalware |
| CAT-QuickHeal | Trojan.CosmuRI.S28491928 |
| ClamAV | Win.Malware.Generickdz-9938530-0 |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cybereason | malicious.8a6f51 |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Encoder.185 |
| ESET-NOD32 | Win32/Agent.NBJ |
| Elastic | malicious (high confidence) |
| Emsisoft | Trojan.GenericKD.67166905 (B) |
| F-Secure | Trojan.TR/ATRAPS.Gen |
| FireEye | Generic.mg.b185afd8a6f51a84 |
| Fortinet | W32/Agent.NBJ!tr |
| GData | Win32.Trojan.Cosmu.B |
| Google | Detected |
| Gridinsoft | Ransom.Win32.Zombie.oa!s1 |
| Ikarus | Trojan.Win32.Agent |
| Jiangmin | Trojan.Cosmu.aqq |
| K7AntiVirus | Trojan ( 005b3dba1 ) |
| K7GW | Trojan ( 005b3dba1 ) |
| Kaspersky | Trojan.Win32.Cosmu.bwts |
| Kingsoft | malware.kb.a.953 |
| Lionic | Trojan.Win32.Cosmu.trZY |
| MAX | malware (ai score=84) |
| Malwarebytes | Generic.Trojan.Malicious.DDS |
| MaxSecure | Trojan.Cosmu.bwts |
| McAfee | Trojan-FVXB!B185AFD8A6F5 |
| McAfeeD | ti!81BF768ACEA7 |
| MicroWorld-eScan | Trojan.GenericKD.67166905 |
| Microsoft | Trojan:Win32/Zombie!rfn |
| NANO-Antivirus | Trojan.Win32.Cosmu.bgzaxj |
| Paloalto | generic.ml |
| Panda | Trj/Genetic.gen |
| Rising | Virus.Zombie!1.AB2A (CLASSIC) |
| SUPERAntiSpyware | Trojan.Agent/Gen-Cosmu |
| Sangfor | Trojan.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win32.RansomwareWinZombieFECEC3.qm |
| Sophos | Mal/Behav-112 |
| Symantec | Ransom.Zombie |
| TACHYON | Trojan/W32.Zomex.Zen |
| Tencent | Trojan.Win32.Agent.kby |
| Trapmine | malicious.high.ml.score |
| TrendMicro | TROJ_GEN.R03BC0DHT24 |
| TrendMicro-HouseCall | TROJ_GEN.R03BC0DHT24 |
| VBA32 | Trojan.Cosmu |
| VIPRE | Trojan.GenericKD.67166905 |
| Varist | W32/Trojan.BOKM-3369 |
| ViRobot | Trojan.Win.Z.Cosmu.60428.AL |
| VirIT | Win32.Zombie.A |
| Webroot | W32.Trojan.Gen |
| Xcitium | TrojWare.Win32.Agent.NBJ@4xjtww |
| Yandex | Trojan.GenAsa!qZCC7vZoV+4 |
| Zillya | Trojan.CosmuGen.Win32.1 |
| ZoneAlarm | Trojan.Win32.Cosmu.bwts |
| alibabacloud | Trojan:Win/Zombie |
| huorong | Ransom/LockFile.mk |