83c4f5abdb1b0a17efad576516116055a8844103429dc651898768d1c80883f7
Classification: Malicious
83c4f5abdb1b0a17efad576516116055a8844103429dc651898768d1c80883f7 is a malicious file sample. Reported by 1 threat source, last seen 2026-09-02.
Detection summary
- 66 antivirus detections
- 0 IDS alerts
- 10 processes observed
- 1 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Generic Malware |
Hybrid-Analysis |
2025-07-28 06:45:05 |
2026-09-02 20:45:07 |
malicious-activity
|
|
Sample information
- Filenames
- 83c4f5abdb1b0a17efad576516116055a8844103429dc651898768d1c80883f7
- File type
- PE32 executable (GUI) Intel 80386, for MS Windows, ...
- Size
- 585728 bytes
- MD5
f4494315c694b7f791034a785e9c6f22- SHA-1
dfe99988b3107f2ba89dfd89bc026f45cc092746- SHA-256
83c4f5abdb1b0a17efad576516116055a8844103429dc651898768d1c80883f7- First indexed
- 2025-07-28 06:35:56
- Last updated
- 2026-09-02 20:45:07
Antivirus detections
| Engine | Detection |
|---|
| ALYac | Gen:Trojan.Redosdru.!o!.1 |
| APEX | Malicious |
| AVG | Win32:Dropper-JQQ [Drp] |
| AhnLab-V3 | Trojan/Win32.Dialer.R29369 |
| Alibaba | TrojanDownloader:Win32/Farfli.5e4c6b6d |
| Antiy-AVL | Trojan[Spy]/Win32.Agent.cdfh |
| Arcabit | Trojan.Redosdru.!o!.1 |
| Avast | Win32:Dropper-JQQ [Drp] |
| Avira | BDS/Zegost.bmnya |
| Baidu | Win32.Trojan.Dialer.a |
| BitDefender | Gen:Trojan.Redosdru.!o!.1 |
| Bkav | W32.AIDetectMalware |
| CAT-QuickHeal | Trojan.Aksula.A |
| CTX | exe.trojan.generic |
| ClamAV | Win.Malware.Generickdz-6957625-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.DownLoader5.49351 |
| ESET-NOD32 | a variant of Win32/Farfli.XB |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Trojan.Redosdru.!o!.1 (B) |
| F-Secure | Backdoor.BDS/Zegost.bmnya |
| Fortinet | W32/Farfli.OC!tr |
| GData | Win32.Trojan.PSE.1PZ3MKT |
| Google | Detected |
| Gridinsoft | Trojan.Win32.Gen.sd!s1 |
| Ikarus | Trojan.Win32.Dialer |
| Jiangmin | TrojanSpy.Agent.tst |
| K7AntiVirus | Trojan ( 0055e3e41 ) |
| K7GW | Trojan ( 0055e3e41 ) |
| Kaspersky | Trojan-Spy.Win32.Agent.cdfh |
| Kingsoft | malware.kb.a.1000 |
| Lionic | Trojan.Win32.Generic.lNr1 |
| Malwarebytes | Generic.Malware.AI.DDS |
| MaxSecure | Trojan.Malware.74714050.susgen |
| McAfeeD | ti!83C4F5ABDB1B |
| MicroWorld-eScan | Gen:Trojan.Redosdru.!o!.1 |
| Microsoft | Backdoor:Win32/Farfli!pz |
| NANO-Antivirus | Trojan.Win32.Dwn.rkaxu |
| Paloalto | generic.ml |
| Panda | W32/P2PWorm.QD.worm |
| Rising | Backdoor.Zegost!1.9CDE (CLASSIC) |
| Sangfor | Suspicious.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | GenericRXER-EK!F4494315C694 |
| Sophos | Mal/Generic-S |
| Symantec | ML.Attribute.HighConfidence |
| TACHYON | Trojan/W32.Agent.585728.JF |
| Tencent | Trojan.Win32.Spy.ecy |
| Trapmine | malicious.high.ml.score |
| TrellixENS | GenericRXER-EK!F4494315C694 |
| TrendMicro | BKDR_ZEGOST.SM34 |
| TrendMicro-HouseCall | BKDR_ZEGOST.SM34 |
| VBA32 | SScope.Trojan.SvcHorse.01643 |
| VIPRE | Gen:Trojan.Redosdru.!o!.1 |
| Varist | W32/Trojan.NOSK-1596 |
| ViRobot | Trojan.Win32.A.Agent.430080.A |
| VirIT | Backdoor.Win32.Generic.BAA |
| Webroot | W32.Trojan.Gen |
| Xcitium | TrojWare.Win32.Kryptik.BHFS@56cp6y |
| Yandex | Trojan.GenAsa!KukhCishWjo |
| Zillya | Trojan.Dialer.Win32.12199 |
| alibabacloud | Backdoor:Win/Farfli |
| tehtris | Generic.Malware |
Process list
| Name | Command line |
|---|
| 83c4f5abdb1b0a17efad576516116055a8844103429dc651898768d1c80883f7.exe | |
| WerFault.exe | -u -p 4680 -s 828 |
| WerFault.exe | -u -p 4680 -s 836 |
| WerFault.exe | -pss -s 440 -p 4680 -ip 4680 |
| WerFault.exe | -pss -s 524 -p 4680 -ip 4680 |
| svchsot.exe | |
| WerFault.exe | -u -p 5840 -s 864 |
| WerFault.exe | -u -p 5840 -s 872 |
| WerFault.exe | -pss -s 504 -p 5840 -ip 5840 |
| WerFault.exe | -pss -s 540 -p 5840 -ip 5840 |