85f95b76174de766fa1ae3d5750afc7c681c13bce722dfc302a561c0f82d91b3
Classification: Malicious
85f95b76174de766fa1ae3d5750afc7c681c13bce722dfc302a561c0f82d91b3 is a malicious file sample. Reported by 2 threat sources, last seen 2026-09-02.
Detection summary
- 30 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 1 contacted hosts
- 6 DNS requests
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-09-02 23:45:06 | 2026-09-02 23:45:06 | malicious-activity | |
| Generic.Malware | MalwareBazaar Abuse.ch | 2024-10-28 13:53:08 | 2024-10-28 13:53:08 | malicious-activity |
Tags
evasiveSample information
- Filenames
- 85f95b76174de766fa1ae3d5750afc7c681c13bce722dfc302a561c0f82d91b3, file
- File type
- application/x-dosexec
- MD5
780e1489d3b5cb62811f0f27884bdfbc- SHA-1
76bd7065b2fc301151c8f38bd234a4eafb39cd34- SHA-256
85f95b76174de766fa1ae3d5750afc7c681c13bce722dfc302a561c0f82d91b3- First indexed
- 2024-10-28 14:18:24
- Last updated
- 2026-09-02 23:45:06
Antivirus detections
| Engine | Detection |
|---|---|
| APEX | Malicious |
| Avira | TR/AutoIt.gnhyr |
| Bkav | W32.AIDetectMalware |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Siggen29.53085 |
| ESET-NOD32 | a variant of Win32/Autoit.ORL |
| Elastic | malicious (high confidence) |
| F-Secure | Trojan.TR/AutoIt.gnhyr |
| FireEye | Generic.mg.780e1489d3b5cb62 |
| Fortinet | AutoIt/Agent.ORL!tr |
| Detected | |
| Ikarus | Trojan.Win32.Autoit |
| Kaspersky | HEUR:Trojan.Script.Generic |
| Malwarebytes | Malware.AI.2298440123 |
| MaxSecure | Trojan.Malware.121218.susgen |
| McAfee | AUTOIT/Agent.t |
| McAfeeD | Real Protect-LS!780E1489D3B5 |
| Microsoft | Trojan:Win32/CredentialFlusher.CCJG!MTB |
| NANO-Antivirus | Trojan.Script.Agent.ksrqww |
| Rising | Stealer.Browser/Autoit!1.10428 (CLASSIC) |
| Skyhigh | BehavesLike.Win32.Genericuh.ch |
| Sophos | Troj/AutoIt-DHF |
| Tencent | Unk.Win32.Script.404787 |
| VBA32 | Trojan.Autoit.Flush |
| Varist | W32/AutoIt.ABS.gen!Eldorado |
| VirIT | Trojan.Win32.AutoIt_Heur.K |
| ZoneAlarm | HEUR:Trojan.Script.Generic |
| huorong | Trojan/AutoIT.Agent.f |
Network contacts
DNS requests
detectportal.firefox.com mozilla.map.fastly.net prod.refractr.prod.webservices.mozgcp.net safebrowsing.googleapis.com shavar.prod.mozaws.net tracking-protection.prod.mozaws.net