86cd1da50679c7e5ecb29c16a557d4972083866e0b644331591095498a2600f7
Classification: Malicious
86cd1da50679c7e5ecb29c16a557d4972083866e0b644331591095498a2600f7 is a malicious file sample. Reported by 2 threat sources, last seen 2026-09-03.
Detection summary
- 21 antivirus detections
- 0 IDS alerts
- 27 processes observed
- 12 contacted hosts
- 14 DNS requests
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2024-09-09 16:30:07 | 2026-09-03 00:45:03 | malicious-activity | |
| Generic.Malware | MalwareBazaar Abuse.ch | 2024-09-06 08:56:12 | 2024-09-06 08:56:12 | malicious-activity |
Tags
evasiveSample information
- Filenames
- 86cd1da50679c7e5ecb29c16a557d4972083866e0b644331591095498a2600f7, 86cd1. Trojan.exe, file
- File type
- application/x-dosexec
- Size
- 917504 bytes
- MD5
3fbff0b0956f1a0f7292484a7a924342- SHA-1
af03ebd6bd50b22d75c17a10dd7e4c4021ff6348- SHA-256
86cd1da50679c7e5ecb29c16a557d4972083866e0b644331591095498a2600f7- First indexed
- 2024-09-06 10:20:13
- Last updated
- 2026-09-03 00:45:04
Antivirus detections
| Engine | Detection |
|---|---|
| APEX | Malicious |
| Avira | TR/Redcap.obzri |
| Bkav | W32.AIDetectMalware |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| ESET-NOD32 | a variant of Win32/Autoit.ORE |
| Elastic | malicious (high confidence) |
| F-Secure | Trojan.TR/Redcap.obzri |
| FireEye | Generic.mg.3fbff0b0956f1a0f |
| Detected | |
| Ikarus | Trojan.Win32.Autoit |
| Kaspersky | HEUR:Trojan.Script.Generic |
| Malwarebytes | Trojan.Injector.AutoIt |
| MaxSecure | Trojan.Malware.121218.susgen |
| McAfeeD | Real Protect-LS!3FBFF0B0956F |
| Rising | Trojan.Injector/Autoit!1.1020D (CLASSIC) |
| Skyhigh | BehavesLike.Win32.Genericuh.ch |
| Symantec | ML.Attribute.HighConfidence |
| Varist | W32/AutoIt.AAH.gen!Eldorado |
| ZoneAlarm | HEUR:Trojan.Script.Generic |
Network contacts
142.251.163.84 142.251.218.227 142.251.218.131 142.251.121.95 142.251.219.46 142.251.151.119 142.251.218.110 142.251.179.84 142.250.72.195 142.251.214.142 142.250.189.164 72.247.190.74
DNS requests
accounts.google.com accounts.youtube.com d156sk07toobyl.cloudfront.net detectportal.firefox.com fonts.gstatic.com mozilla.map.fastly.net play.google.com prod.refractr.prod.webservices.mozgcp.net safebrowsing.googleapis.com shavar.prod.mozaws.net tracking-protection.prod.mozaws.net www.google.com www.gstatic.com www3.l.google.com
Process list
| Name | Command line |
|---|---|
| 86cd1.Trojan.exe | |
| msedge.exe | https://accounts.google.com/ServiceLogin?service=accountsettings&continue=https://accounts.google.com/v3/signin/challenge/pwd |
| msedge.exe | --type=crashpad-handler "--user-data-dir=%LOCALAPPDATA%\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=%LOCALAPPDATA%\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=107.0.5304.110 "--annotation=exe=%PROGRAMFILES%\(x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=107.0.1418.56 --initial-client-data=0xc8,0xcc,0xd0,0xa4,0x158,0x7ff8f953b208,0x7ff8f953b218,0x7ff8f953b228 |
| msedge.exe | --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1472 --field-trial-handle=2024,i,3067371809367716323,459412913396722570,131072 /prefetch:2 |
| msedge.exe | --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1800 --field-trial-handle=2024,i,3067371809367716323,459412913396722570,131072 /prefetch:3 |
| msedge.exe | --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2168 --field-trial-handle=2024,i,3067371809367716323,459412913396722570,131072 /prefetch:8 |
| msedge.exe | --type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --time-ticks-at-unix-epoch=-1725922313736768 --launch-time-ticks=1062044490 --mojo-platform-channel-handle=2352 --field-trial-handle=2024,i,3067371809367716323,459412913396722570,131072 /prefetch:1 |
| msedge.exe | --type=renderer --display-capture-permissions-policy-allowed --js-flags=--ms-user-locale= --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --time-ticks-at-unix-epoch=-1725922313736768 --launch-time-ticks=1062379268 --mojo-platform-channel-handle=2736 --field-trial-handle=2024,i,3067371809367716323,459412913396722570,131072 /prefetch:1 |
| msedge.exe | --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --mojo-platform-channel-handle=3528 --field-trial-handle=2024,i,3067371809367716323,459412913396722570,131072 /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5008 --field-trial-handle=2024,i,3067371809367716323,459412913396722570,131072 /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5068 --field-trial-handle=2024,i,3067371809367716323,459412913396722570,131072 /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --mojo-platform-channel-handle=5336 --field-trial-handle=2024,i,3067371809367716323,459412913396722570,131072 /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=entity_extraction_service.mojom.PageScreenshotProcessor --lang=en-US --service-sandbox-type=entity_extraction --mojo-platform-channel-handle=5208 --field-trial-handle=2024,i,3067371809367716323,459412913396722570,131072 /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5648 --field-trial-handle=2024,i,3067371809367716323,459412913396722570,131072 /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6024 --field-trial-handle=2024,i,3067371809367716323,459412913396722570,131072 /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5156 --field-trial-handle=2024,i,3067371809367716323,459412913396722570,131072 /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1752 --field-trial-handle=2024,i,3067371809367716323,459412913396722570,131072 /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=6152 --field-trial-handle=2024,i,3067371809367716323,459412913396722570,131072 /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=6152 --field-trial-handle=2024,i,3067371809367716323,459412913396722570,131072 /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1784 --field-trial-handle=2024,i,3067371809367716323,459412913396722570,131072 /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1976 --field-trial-handle=2024,i,3067371809367716323,459412913396722570,131072 /prefetch:8 |
| msedge.exe | --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.16299.192 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1224 --field-trial-handle=2024,i,3067371809367716323,459412913396722570,131072 /prefetch:2 |
| msedge.exe | --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2500 --field-trial-handle=2024,i,3067371809367716323,459412913396722570,131072 /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1784 --field-trial-handle=2024,i,3067371809367716323,459412913396722570,131072 /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3828 --field-trial-handle=2024,i,3067371809367716323,459412913396722570,131072 /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5132 --field-trial-handle=2024,i,3067371809367716323,459412913396722570,131072 /prefetch:8 |
| msedge.exe | --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5140 --field-trial-handle=2024,i,3067371809367716323,459412913396722570,131072 /prefetch:8 |