84d75e3b46650e5a2af66a54fc09ed077b263940a863916598bd797318b8b3bb

Classification: Malicious

84d75e3b46650e5a2af66a54fc09ed077b263940a863916598bd797318b8b3bb is a malicious file sample. Reported by 3 threat sources, last seen 2026-09-02.

Detection summary

  • 29 antivirus detections (40% detection ratio)
  • 2 IDS alerts
  • 2 processes observed
  • 2 contacted hosts
  • 1 DNS requests

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2023-11-22 13:30:05 2026-09-02 21:45:03 malicious-activity
Spyware VM-Ray 2023-11-22 14:22:36 2023-11-22 15:23:07
Generic.Malware MalwareBazaar Abuse.ch 2023-11-22 12:37:58 2023-11-22 12:37:58 malicious-activity

Tags

evasive windows-server-utility

Sample information

Filenames
84d75e3b46650e5a2af66a54fc09ed077b263940a863916598bd797318b8b3bb, 84d75e3b46650e5a2af66a54fc09ed077b263940a863916598bd797318b8b3bb.exe, SecuriteInfo.com.Trojan.PackedNET.2542.19955.12126
File type
application/x-dosexec
Size
703488 bytes
MD5
5ff26a7e6df31916923579c6bdfb6e15
SHA-1
47dacc5a47278ed6c7283e363f034eae56b2ce25
SHA-256
84d75e3b46650e5a2af66a54fc09ed077b263940a863916598bd797318b8b3bb
First indexed
2023-11-22 13:16:19
Last updated
2026-09-02 21:45:04

Antivirus detections

EngineDetection
LionicTrojan.Win32.Agensla.i!c
SkyhighBehavesLike.Win32.Generic.jc
McAfeeArtemis!5FF26A7E6DF3
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (D)
VirITTrojan.Win32.MSIL_Heur.A
SymantecScr.Malcode!gdn33
Elasticmalicious (high confidence)
CynetMalicious (score: 100)
APEXMalicious
KasperskyUDS:Trojan-PSW.MSIL.Agensla.gen
AvastDropperX-gen [Drp]
SophosTroj/Krypt-ABH
SentinelOneStatic AI - Malicious PE
WebrootW32.Dropper.Gen
VaristW32/MSIL_Agent.FPI.gen!Eldorado
KingsoftWin32.PSWTroj.Undef.a
MicrosoftTrojan:Win32/AgentTesla!ml
ZoneAlarmUDS:Trojan-PSW.MSIL.Agensla.gen
GoogleDetected
Acronissuspicious
Cylanceunsafe
TrendMicro-HouseCallTROJ_GEN.F0D1C00KM23
RisingMalware.Obfus/[email protected] (RDM.MSIL2:csfXR+PykiW5rruAvN3Aag)
IkarusTrojan-Spy.AgentTesla
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/GenKryptik.GJKZ!tr
AVGDropperX-gen [Drp]
DeepInstinctMALICIOUS

Network contacts

172.67.74.152 64.185.227.156

DNS requests

api.ipify.org

Process list

NameCommand line
84d75e3b46650e5a2af66a54fc09ed077b263940a863916598bd797318b8b3bb.exe
84d75e3b46650e5a2af66a54fc09ed077b263940a863916598bd797318b8b3bb.exe