86aa6bf18fb52c273911bc7686de2e41d9150691f80f8e96076ccb4804d79891

Classification: Malicious

86aa6bf18fb52c273911bc7686de2e41d9150691f80f8e96076ccb4804d79891 is a malicious file sample. Reported by 3 threat sources, last seen 2026-09-03.

Detection summary

  • 60 antivirus detections
  • 1 IDS alerts
  • 0 processes observed
  • 1 contacted hosts
  • 0 DNS requests

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-09-03 00:45:05 2026-09-03 00:45:05 malicious-activity
MetaStealer ThreatFox Abuse.ch 2024-09-24 06:58:14 2024-09-26 06:20:04
Generic.Malware MalwareBazaar Abuse.ch 2024-09-23 18:20:22 2024-09-23 18:20:22 malicious-activity

Tags

win.metastealer

Sample information

Filenames
86aa6bf18fb52c273911bc7686de2e41d9150691f80f8e96076ccb4804d79891, ca4d7b61ab00b70d86a0e2d3699d938e.exe
File type
application/x-dosexec
MD5
ca4d7b61ab00b70d86a0e2d3699d938e
SHA-1
29c1433ccf89f21646d9a041f118d19cb169cc6c
SHA-256
86aa6bf18fb52c273911bc7686de2e41d9150691f80f8e96076ccb4804d79891
First indexed
2024-09-23 19:23:05
Last updated
2026-09-03 00:45:05

Antivirus detections

EngineDetection
ALYacTrojan.CryptZ.Marte.1.Gen
APEXMalicious
AVGWin32:Meterpreter-C [Trj]
Acronissuspicious
AhnLab-V3Trojan/Win32.Shell.R1283
Antiy-AVLGrayWare/Win32.Tampering.a
ArcabitTrojan.CryptZ.Marte.1.Gen
AvastWin32:Meterpreter-C [Trj]
AviraTR/Patched.Gen2
BitDefenderTrojan.CryptZ.Marte.1.Gen
BkavW32.FamVT.RorenNHc.Trojan
CAT-QuickHealTrojan.Swrort.A
CTXexe.trojan.cryptz
ClamAVWin.Trojan.Swrort-5710536-0
CrowdStrikewin/malicious_confidence_100% (D)
CylanceUnsafe
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
ESET-NOD32a variant of Win32/Rozena.AA
ElasticWindows.Trojan.Metasploit
EmsisoftTrojan.CryptZ.Marte.1.Gen (B)
F-SecureTrojan.TR/Patched.Gen2
FireEyeGeneric.mg.ca4d7b61ab00b70d
FortinetW32/Rozena.ABV!tr
GDataWin32.Trojan.PSE.10KKVZ1
GoogleDetected
GridinsoftTrojan.Win32.Swrort.zv!s2
IkarusTrojan.Win32.Swrort
K7AntiVirusTrojan ( 001172b51 )
K7GWTrojan ( 001172b51 )
KasperskyHEUR:Trojan.Win32.Generic
Kingsoftmalware.kb.a.1000
MalwarebytesTrojan.Rozena
MaxSecureTrojan.Malware.300983.susgen
McAfeeSwrort.i
McAfeeDReal Protect-LS!CA4D7B61AB00
MicroWorld-eScanTrojan.CryptZ.Marte.1.Gen
MicrosoftTrojan:Win32/Meterpreter.O
NANO-AntivirusVirus.Win32.Gen-Crypt.ccnc
RisingHackTool.Swrort!1.6477 (CLASSIC)
SUPERAntiSpywareTrojan.Backdoor-Shell
SangforTrojan.Win32.Save.a
SentinelOneStatic AI - Malicious PE
SkyhighBehavesLike.Win32.Swrort.lh
SophosMal/EncPk-ACE
SymantecPacked.Generic.347
TencentTrojan.Win32.Metasploit_heur.16000690
Trapminemalicious.high.ml.score
TrendMicroBackdoor.Win32.SWRORT.SMAL01
TrendMicro-HouseCallBackdoor.Win32.SWRORT.SMAL01
VBA32BScope.Trojan.Metasploit
VIPRETrojan.CryptZ.Marte.1.Gen
VaristW32/Swrort.D
ViRobotTrojan.Win32.Elzob.Gen
WebrootW32.Malware.Gen
XcitiumTrojWare.Win32.Rozena.A@4jwdqr
YandexTrojan.Rosena.Gen.1
ZillyaTrojan.RozenaGen.Win32.2
ZoneAlarmHEUR:Trojan.Win32.Generic
huorongVirTool/Meterpreter.a

Network contacts

89.197.154.116