855f8c478918d0202a467a90a5ead1be7a4e87e08485106a6a545938979204ac
Classification: Malicious
855f8c478918d0202a467a90a5ead1be7a4e87e08485106a6a545938979204ac is a malicious file sample. Reported by 2 threat sources, last seen 2026-09-02.
Detection summary
- 34 antivirus detections
- 3 IDS alerts
- 0 processes observed
- 3 contacted hosts
- 5 DNS requests
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-09-02 22:45:03 | 2026-09-02 22:45:03 | malicious-activity | |
| SnakeKeylogger | MalwareBazaar Abuse.ch | 2023-11-30 06:53:55 | 2023-11-30 06:53:55 | malicious-activity |
Sample information
- Filenames
- 855f8c478918d0202a467a90a5ead1be7a4e87e08485106a6a545938979204ac, Invoice YA 2023.exe
- File type
- application/x-dosexec
- MD5
2fdd47b3a729217cdd1848ce1d832bd2- SHA-1
80b1f475e7c906927b87b76bea1d72a0ae0ce2c7- SHA-256
855f8c478918d0202a467a90a5ead1be7a4e87e08485106a6a545938979204ac- First indexed
- 2023-11-30 07:18:41
- Last updated
- 2026-09-02 22:45:03
Antivirus detections
| Engine | Detection |
|---|---|
| Bkav | W32.AIDetectMalware.CS |
| MicroWorld-eScan | Gen:Variant.Ser.Lazy.5637 |
| FireEye | Gen:Variant.Ser.Lazy.5637 |
| Skyhigh | BehavesLike.Win32.Generic.hc |
| McAfee | GenericRXWL-XN!2FDD47B3A729 |
| Malwarebytes | Trojan.MalPack.PNG.Generic |
| Sangfor | Suspicious.Win32.Save.a |
| CrowdStrike | win/malicious_confidence_90% (D) |
| Arcabit | Trojan.Ser.Lazy.D1605 |
| VirIT | Trojan.Win32.MSIL_Heur.A |
| Symantec | Scr.Malcode!gdn33 |
| Elastic | malicious (high confidence) |
| ESET-NOD32 | a variant of MSIL/Kryptik.AKGP |
| APEX | Malicious |
| Cynet | Malicious (score: 100) |
| Kaspersky | HEUR:Trojan-PSW.MSIL.Agensla.gen |
| BitDefender | Gen:Variant.Ser.Lazy.5637 |
| Avast | Win32:PWSX-gen [Trj] |
| Emsisoft | Gen:Variant.Ser.Lazy.5637 (B) |
| DrWeb | Trojan.Inject4.59820 |
| Sophos | Troj/Krypt-ABH |
| SentinelOne | Static AI - Malicious PE |
| Detected | |
| MAX | malware (ai score=82) |
| Microsoft | Trojan:MSIL/AgentTesla.DL!MTB |
| ZoneAlarm | HEUR:Trojan-PSW.MSIL.Agensla.gen |
| GData | Gen:Variant.Ser.Lazy.5637 |
| Varist | W32/MSIL_Kryptik.KFC.gen!Eldorado |
| AhnLab-V3 | Trojan/Win.PWSX-gen.C5556353 |
| Rising | Malware.Obfus/[email protected] (RDM.MSIL2:ecFe8vEhxTyXJEPt+2NYgQ) |
| Ikarus | Trojan.MSIL.Inject |
| Fortinet | MSIL/Kryptik.HDZY!tr |
| AVG | Win32:PWSX-gen [Trj] |
| DeepInstinct | MALICIOUS |
Network contacts
DNS requests
aborters.duckdns.org anotherarmy.dns.army checkip.dyndns.org reallyfreegeoip.org varders.kozow.com