85f95b76174de766fa1ae3d5750afc7c681c13bce722dfc302a561c0f82d91b3

Classification: Malicious

85f95b76174de766fa1ae3d5750afc7c681c13bce722dfc302a561c0f82d91b3 is a malicious file sample. Reported by 2 threat sources, last seen 2026-09-02.

Detection summary

  • 30 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 1 contacted hosts
  • 6 DNS requests

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-09-02 23:45:06 2026-09-02 23:45:06 malicious-activity
Generic.Malware MalwareBazaar Abuse.ch 2024-10-28 13:53:08 2024-10-28 13:53:08 malicious-activity

Tags

evasive

Sample information

Filenames
85f95b76174de766fa1ae3d5750afc7c681c13bce722dfc302a561c0f82d91b3, file
File type
application/x-dosexec
MD5
780e1489d3b5cb62811f0f27884bdfbc
SHA-1
76bd7065b2fc301151c8f38bd234a4eafb39cd34
SHA-256
85f95b76174de766fa1ae3d5750afc7c681c13bce722dfc302a561c0f82d91b3
First indexed
2024-10-28 14:18:24
Last updated
2026-09-02 23:45:06

Antivirus detections

EngineDetection
APEXMalicious
AviraTR/AutoIt.gnhyr
BkavW32.AIDetectMalware
CylanceUnsafe
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
DrWebTrojan.Siggen29.53085
ESET-NOD32a variant of Win32/Autoit.ORL
Elasticmalicious (high confidence)
F-SecureTrojan.TR/AutoIt.gnhyr
FireEyeGeneric.mg.780e1489d3b5cb62
FortinetAutoIt/Agent.ORL!tr
GoogleDetected
IkarusTrojan.Win32.Autoit
KasperskyHEUR:Trojan.Script.Generic
MalwarebytesMalware.AI.2298440123
MaxSecureTrojan.Malware.121218.susgen
McAfeeAUTOIT/Agent.t
McAfeeDReal Protect-LS!780E1489D3B5
MicrosoftTrojan:Win32/CredentialFlusher.CCJG!MTB
NANO-AntivirusTrojan.Script.Agent.ksrqww
RisingStealer.Browser/Autoit!1.10428 (CLASSIC)
SkyhighBehavesLike.Win32.Genericuh.ch
SophosTroj/AutoIt-DHF
TencentUnk.Win32.Script.404787
VBA32Trojan.Autoit.Flush
VaristW32/AutoIt.ABS.gen!Eldorado
VirITTrojan.Win32.AutoIt_Heur.K
ZoneAlarmHEUR:Trojan.Script.Generic
huorongTrojan/AutoIT.Agent.f

Network contacts

142.251.121.95

DNS requests

detectportal.firefox.com mozilla.map.fastly.net prod.refractr.prod.webservices.mozgcp.net safebrowsing.googleapis.com shavar.prod.mozaws.net tracking-protection.prod.mozaws.net