84bdf67e5c6a21a9a93d92faf757867be46f52043f59560716098b6589c2dd51
Classification: Malicious
84bdf67e5c6a21a9a93d92faf757867be46f52043f59560716098b6589c2dd51 is a virus (Windows executable). Detected by 63 antivirus engines. Linked to Wiper malware.
Detection summary
- 63 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: WIPER (S0041)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Spyware | VM-Ray | 2022-09-22 10:18:51 | 2022-09-22 10:18:51 | ||
| Backdoor | VM-Ray | 2022-09-22 10:18:51 | 2022-09-22 10:18:51 | ||
| Ransomware | VM-Ray | 2022-09-22 10:18:51 | 2022-09-22 10:18:51 | ||
| Wiper | VM-Ray | 2022-09-22 10:18:51 | 2022-09-22 10:18:51 | S0041 Wiper |
Sample information
- Filenames
- ._cache_program.exe
- File type
- PE32 executable (GUI) Intel 80386, for MS Windows
- SHA-256
84bdf67e5c6a21a9a93d92faf757867be46f52043f59560716098b6589c2dd51- First indexed
- 2022-09-22 09:47:00
- Last updated
- 2026-09-03 03:30:38
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Win32.Neshta.A |
| APEX | Malicious |
| AVG | Other:Malware-gen [Trj] |
| Acronis | suspicious |
| Ad-Aware | Win32.Neshta.A |
| AhnLab-V3 | Win32/Neshta.Gen |
| Antiy-AVL | Virus/Win32.Neshta.a |
| Arcabit | Win32.Neshta.A |
| Avast | Other:Malware-gen [Trj] |
| Avira | W32/Neshta.A |
| Baidu | Win32.Virus.Neshta.a |
| BitDefender | Win32.Neshta.A |
| BitDefenderTheta | AI:FileInfector.D5C3B0640E |
| Bkav | W32.NeshtaB.PE |
| CAT-QuickHeal | W32.Neshta.C8 |
| ClamAV | Win.Trojan.Neshuta-1 |
| Comodo | Win32.Neshta.A@3ypg |
| Cybereason | malicious.01db4a |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| Cyren | W32/Neshta.OBIX-2981 |
| DrWeb | BackDoor.AsyncRATNET.2 |
| ESET-NOD32 | Win32/Neshta.A |
| Elastic | malicious (high confidence) |
| Emsisoft | Win32.Neshta.A (B) |
| F-Secure | Malware.W32/Neshta.A |
| FireEye | Generic.mg.de1510d01db4a4c4 |
| Fortinet | VBA/Agent.IGI!tr.dldr |
| GData | Win32.Virus.Neshta.D |
| Detected | |
| Gridinsoft | Virus.Neshta.A.sd!yf |
| Ikarus | Virus.Win32.Neshta |
| Jiangmin | Virus.Neshta.a |
| K7AntiVirus | Virus ( 00556e571 ) |
| K7GW | Virus ( 00556e571 ) |
| Kaspersky | Virus.Win32.Neshta.a |
| MAX | malware (ai score=81) |
| Malwarebytes | Neshta.Virus.FileInfector.DDS |
| MaxSecure | Virus.Infector.Gen9 |
| McAfee | W32/HLLP.41472.e |
| McAfee-GW-Edition | BehavesLike.Win32.HLLP.vh |
| MicroWorld-eScan | Win32.Neshta.A |
| Microsoft | Virus:Win32/Neshta.A |
| NANO-Antivirus | Trojan.Win32.Winlock.fmobyw |
| Panda | W32/Neshta.A |
| Rising | Win32.Neshta.a (CLASSIC) |
| Sangfor | Virus.Win32.Neshta.a |
| SentinelOne | Static AI - Malicious PE |
| Sophos | ML/PE-A + W32/Neshta-D |
| Symantec | W32.Neshuta |
| TACHYON | Virus/W32.Neshta |
| Tencent | Virus.Win32.Neshta.a |
| Trapmine | malicious.high.ml.score |
| TrendMicro | PE_NESHTA.A |
| TrendMicro-HouseCall | PE_NESHTA.A |
| VBA32 | Virus.Win32.Neshta.a |
| VIPRE | Win32.Neshta.A |
| ViRobot | Win32.Neshta.Gen.A |
| VirIT | Win32.Delf.FE |
| Yandex | Trojan.GenAsa!Mo0tdcmmg3o |
| Zillya | Virus.Neshta.Win32.1 |
| ZoneAlarm | Virus.Win32.Neshta.a |
| tehtris | Generic.Malware |