84df5a753f430c7b16ce9ad1777fef4999b463d0e0bcf0581bf13262ca78e2d4

Classification: Malicious

84df5a753f430c7b16ce9ad1777fef4999b463d0e0bcf0581bf13262ca78e2d4 is a malicious file sample. Reported by 3 threat sources, last seen 2026-09-02.

Detection summary

  • 44 antivirus detections (61% detection ratio)
  • 2 IDS alerts
  • 16 processes observed
  • 4 contacted hosts
  • 3 DNS requests

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2023-11-28 00:15:32 2026-09-02 22:45:08 malicious-activity
Downloader VM-Ray 2023-11-28 02:23:33 2023-11-28 03:23:57
Generic.Malware MalwareBazaar Abuse.ch 2023-11-27 23:55:15 2023-11-27 23:55:15 malicious-activity

Sample information

Filenames
84df5a753f430c7b16ce9ad1777fef4999b463d0e0bcf0581bf13262ca78e2d4, file.exe, file
File type
PE32 executable (GUI) Intel 80386, for MS Windows
Size
1540614 bytes
MD5
bbbfd50750ddc3fd8b411b0bd4db2f62
SHA-1
955ee8863db1c8afe739f2e444ad21bfbc618206
SHA-256
84df5a753f430c7b16ce9ad1777fef4999b463d0e0bcf0581bf13262ca78e2d4
First indexed
2023-11-27 23:56:17
Last updated
2026-09-02 22:45:08

Antivirus detections

EngineDetection
BkavW32.AIDetectMalware
MicroWorld-eScanTrojan.GenericKD.70584515
MalwarebytesRiskWare.Agent
Cybereasonmalicious.63db1c
ArcabitTrojan.Generic.D43508C3
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Agent.ADVG
CynetMalicious (score: 100)
APEXMalicious
ClamAVWin.Malware.Zard-10015589-0
KasperskyHEUR:Trojan-PSW.Win32.RisePro.gen
BitDefenderTrojan.GenericKD.70584515
NANO-AntivirusTrojan.Win32.Mint.kegarr
AvastWin32:TrojanX-gen [Trj]
TencentMalware.Win32.Gencirc.10bf62cd
F-SecureTrojan.TR/Agent.azfwy
DrWebTrojan.MulDrop24.22194
VIPRETrojan.GenericKD.70584515
Trapminesuspicious.low.ml.score
FireEyeGeneric.mg.bbbfd50750ddc3fd
EmsisoftTrojan.GenericKD.70584515 (B)
JiangminTrojan.Generic.hryzt
VaristW32/Sdum.Z.gen!Eldorado
AviraTR/Agent.azfwy
Antiy-AVLTrojan/Win32.Agent
GridinsoftTrojan.Win32.Agent.oa!s1
MicrosoftTrojan:Win32/RiseProStealer.PA!MTB
ZoneAlarmHEUR:Trojan-PSW.Win32.RisePro.gen
GDataTrojan.GenericKD.70584515
AhnLab-V3Trojan/Win.Generic.R624285
BitDefenderThetaGen:NN.ZexaF.36608.Ev1@a4aq2Fpk
ALYacGen:Heur.Mint.Zard.45
MAXmalware (ai score=89)
VBA32BScope.TrojanPSW.RisePro
Cylanceunsafe
PandaTrj/GdSda.A
RisingDownloader.Agent!1.D93C (CLASSIC)
YandexTrojan.Agent!E34nJNo+lBI
MaxSecureTrojan.Malware.121218.susgen
FortinetW32/Agent.ADVG!tr
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS
CrowdStrikewin/malicious_confidence_70% (W)

Network contacts

194.49.94.152 34.117.59.81 104.26.4.15 104.18.146.235

DNS requests

db-ip.com ipinfo.io www.maxmind.com

Process list

NameCommand line
file.exe
schtasks.exeschtasks /create /f /RU "%OSUSER%" /tr "%ALLUSERSPROFILE%\OfficeTrackerNMP131\OfficeTrackerNMP131.exe" /tn "OfficeTrackerNMP131 HR" /sc HOURLY /rl HIGHEST
schtasks.exeschtasks /create /f /RU "%OSUSER%" /tr "%ALLUSERSPROFILE%\OfficeTrackerNMP131\OfficeTrackerNMP131.exe" /tn "OfficeTrackerNMP131 LG" /sc ONLOGON /rl HIGHEST
WerFault.exe-u -p 3344 -s 1264
OfficeTrackerNMP131.exe
WerFault.exe-u -p 3260 -s 984
MaxLoonaFest131.exe
WerFault.exe-u -p 3492 -s 996
FANBooster131.exe
WerFault.exe-u -p 2708 -s 996
file.exe
schtasks.exeschtasks /create /f /RU "%OSUSER%" /tr "%ALLUSERSPROFILE%\OfficeTrackerNMP131\OfficeTrackerNMP131.exe" /tn "OfficeTrackerNMP131 HR" /sc HOURLY /rl HIGHEST
schtasks.exeschtasks /create /f /RU "%OSUSER%" /tr "%ALLUSERSPROFILE%\OfficeTrackerNMP131\OfficeTrackerNMP131.exe" /tn "OfficeTrackerNMP131 LG" /sc ONLOGON /rl HIGHEST
OfficeTrackerNMP131.exe
FANBooster131.exe
MaxLoonaFest131.exe