86070a98e77b5209370b71dce0160f05a3b18ab106fc9073529869053bfe41f1
Classification: Malicious
86070a98e77b5209370b71dce0160f05a3b18ab106fc9073529869053bfe41f1 is a malicious file sample. Reported by 1 threat source, last seen 2026-09-02.
Detection summary
- 67 antivirus detections (62% detection ratio)
- 0 IDS alerts
- 12 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Generic Malware |
Hybrid-Analysis |
2023-11-02 08:15:03 |
2026-09-02 23:45:06 |
malicious-activity
|
|
Tags
anunak
apt
apt.naikon
apt12
apt23
apt28
apt30
backdoor
banker
beebus
calcteam
camerashy
carbanak
carbonspider
careto
crimsoniron
darkhotel
dnscalc
dragon
dubnium
dyncalc
emdivi
exploit
fake
falloutteam
fancybear
fin7
group-4127
group22
group74
group88
hacktool
hippoteam
irontwilight
ixeshe
karba
keyboy
krypton
luder
naikon
nemim
numberedpanda
overridepanda
panda
pawnstorm
pfinet
piratepanda
plaunit78020
promethiumm
sednit
snake
sofacy
strongpity
strontium
swallowtail
tag_0530
tag_0700
tapaoux
tg-2754
tg-4127
themask
trojan
tsarteam
turla
turlagroup
turlateam
uroburos
venomousbear
waterbug
wraith
socks
Sample information
- Filenames
- 86070a98e77b5209370b71dce0160f05a3b18ab106fc9073529869053bfe41f1
- File type
- PE32 executable (GUI) Intel 80386, for MS Windows
- Size
- 21304320 bytes
- MD5
d3cca15da7805acb813d4f1556e85f58
- SHA-1
6700afb03934b01b0b2a9885799322307e3299d5
- SHA-256
86070a98e77b5209370b71dce0160f05a3b18ab106fc9073529869053bfe41f1
- First indexed
- 2023-11-02 07:59:03
- Last updated
- 2026-09-02 23:45:06
Antivirus detections
| Engine | Detection |
| Bkav | W32.AIDetectMalware |
| MicroWorld-eScan | Trojan.Agent.GGTP |
| McAfee | Artemis!D3CCA15DA780 |
| Zillya | Dropper.Agent.Win32.469714 |
| Sangfor | Dropper.Win32.Agent.Vaar |
| K7AntiVirus | Trojan ( 005aa4831 ) |
| BitDefender | Trojan.Agent.GGTP |
| K7GW | Trojan ( 005aa4831 ) |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cyren | W32/Tool.QKPD-3386 |
| Symantec | Trojan Horse |
| ESET-NOD32 | a variant of Win64/Spacecolon.A |
| APEX | Malicious |
| Kaspersky | HEUR:Trojan-Dropper.Win32.Agent.gen |
| ViRobot | Trojan.Win.S.Agent.21304320 |
| Rising | [email protected] (RDML:oQ5DDx/PGydvOwBmVVFXXQ) |
| Emsisoft | Trojan.Agent.GGTP (B) |
| F-Secure | Trojan.TR/Delf.Agent.qjmea |
| VIPRE | Trojan.Agent.GGTP |
| TrendMicro | TROJ_FRS.VSNTHP23 |
| McAfee-GW-Edition | Artemis |
| Trapmine | malicious.high.ml.score |
| FireEye | Trojan.Agent.GGTP |
| Sophos | Mal/Generic-S (PUA) |
| Ikarus | Trojan.Win64.Spacecolon |
| Webroot | W32.Hacktool.Spacecolon |
| Avira | TR/Delf.Agent.qjmea |
| Antiy-AVL | Trojan/Win64.Delf |
| Microsoft | Trojan:Win32/Malgent!MSR |
| Arcabit | Trojan.Agent.GGTP |
| ZoneAlarm | HEUR:Trojan-Dropper.Win32.Agent.gen |
| GData | Trojan.Agent.GGTP |
| Google | Detected |
| AhnLab-V3 | Dropper/Win.Generic.C5475516 |
| ALYac | Trojan.Agent.GGTP |
| MAX | malware (ai score=83) |
| DeepInstinct | MALICIOUS |
| VBA32 | TScope.Trojan.Delf |
| Cylance | unsafe |
| TrendMicro-HouseCall | TROJ_FRS.VSNTHP23 |
| Tencent | Malware.Win32.Gencirc.13d0a4f4 |
| MaxSecure | Trojan.Malware.12026031.susgen |
| AVG | Win32:Trojan-gen |
| Cybereason | malicious.03934b |
| Avast | Win32:Trojan-gen |
| CTX | exe.trojan.spacecolon |
| ClamAV | Win.Packed.Generic-10013703-0 |
| Cylance | Unsafe |
| Cynet | Malicious (score: 99) |
| Fortinet | W64/Spacecolon.A!tr |
| Kingsoft | Win32.Trojan-Dropper.Agent.gen |
| Lionic | Trojan.Win32.Spacecolon.b!c |
| Malwarebytes | Malware.AI.4250425730 |
| McAfeeD | ti!86070A98E77B |
| NANO-Antivirus | Trojan.Win32.Delf.ksjyvk |
| Paloalto | generic.ml |
| Rising | Dropper.Agent!8.2F (CLOUD) |
| Sangfor | Dropper.Win32.Spacecolon.Vexi |
| Skyhigh | Artemis |
| Sophos | Generic Reputation PUA (PUA) |
| TrellixENS | Artemis!D3CCA15DA780 |
| TrendMicro | Trojan.Win32.SPACECOLON.VSNW1DA24 |
| TrendMicro-HouseCall | Trojan.Win32.SPACECOLON.VSNW1DA24 |
| Varist | W32/Tool.QKPD-3386 |
| VirIT | Trojan.Win32.DelphGen.HGX |
| alibabacloud | Trojan[dropper]:Win/Spacecolon.A |
| huorong | TrojanDropper/Spacecolon.a |
Process list
| Name | Command line |
| 86070a98e77b5209370b71dce0160f05a3b18ab106fc9073529869053bfe41f1.exe | |
| svcss.exe | /install |
| svcss.exe | /install |
| svcss.exe | /install |
| svcss.exe | /install |
| svcss.exe | /install |
| svcss.exe | /install |
| svcss.exe | /install |
| svcss.exe | /install |
| svcss.exe | /install |
| svcss.exe | /install |
| svcss.exe | /install |