Quotation.exe

Classification: Malicious

Quotation.exe is a malicious file sample (application/x-dosexec). Linked to Sombrat malware. 50 sightings, last seen 2024-05-01.

Detection summary

  • 0 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: SOMBRAT (S0615)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
SombRAT ThreatFox Abuse.ch 2024-04-29 15:53:38 2024-05-01 15:20:37 S0615 SombRAT
VenomRAT MalwareBazaar Abuse.ch 2024-04-29 09:26:53 2024-04-29 09:26:53 malicious-activity

Tags

win.sombrat

Sample information

Filenames
Quotation.exe
File type
application/x-dosexec
MD5
0d7c259c157208ed087de127e9759687
SHA-1
d66ed5ad63438425dd7029a109983125cb9db318
SHA-256
8259eff22466f7ef35455edda25db31de7334666d4e7bce013c898a3777b4861
First indexed
2024-04-29 10:23:21
Last updated
2026-08-02 20:17:03