86d0b3c927b629f98bb72beebcdee8a831df152a6a2cedb0d65270c23069037c
Classification: Malicious
86d0b3c927b629f98bb72beebcdee8a831df152a6a2cedb0d65270c23069037c is a malicious file sample. Reported by 2 threat sources, last seen 2026-09-03.
Detection summary
- 20 antivirus detections
- 0 IDS alerts
- 2 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Generic Malware |
Hybrid-Analysis |
2024-07-10 17:30:03 |
2026-09-03 00:45:03 |
malicious-activity
|
|
| SigLoader |
ThreatFox Abuse.ch |
2024-07-10 18:06:44 |
2024-07-12 17:20:50 |
|
|
Tags
evasive
windows-server-utility
win.sigloader
Sample information
- Filenames
- 86d0b3c927b629f98bb72beebcdee8a831df152a6a2cedb0d65270c23069037c, KWOTASIE.exe
- File type
- PE32 executable (GUI) Intel 80386, for MS Windows, ...
- Size
- 895168 bytes
- MD5
31ca0fd14af9b89c0aacd1a1c7dfd7e4
- SHA-1
67a33810ae059e722bbc5203fa644e5e550d5995
- SHA-256
86d0b3c927b629f98bb72beebcdee8a831df152a6a2cedb0d65270c23069037c
- First indexed
- 2024-07-10 17:17:38
- Last updated
- 2026-09-03 00:45:03
Antivirus detections
| Engine | Detection |
| APEX | Malicious |
| AVG | FileRepMalware [Trj] |
| Avast | FileRepMalware [Trj] |
| Bkav | W32.AIDetectMalware |
| CrowdStrike | win/malicious_confidence_90% (D) |
| Cylance | Unsafe |
| DeepInstinct | MALICIOUS |
| ESET-NOD32 | NSIS/Injector.CTW |
| Elastic | malicious (high confidence) |
| Google | Detected |
| Ikarus | Trojan.MSIL.Inject |
| Kaspersky | HEUR:Trojan.Win32.Makoob.gen |
| McAfee | Artemis!31CA0FD14AF9 |
| Microsoft | Trojan:Win32/GuLoader.KEWK!MTB |
| Paloalto | generic.ml |
| Panda | Trj/Chgt.AD |
| Skyhigh | Artemis!Trojan |
| Sophos | Mal/Generic-S |
| Trapmine | suspicious.low.ml.score |
| ZoneAlarm | UDS:Trojan.Win32.Makoob.gen |
Process list
| Name | Command line |
| KWOTASIE.exe | |
| powershell.exe | -windowstyle hidden " $Atomicity=cat '%LOCALAPPDATA%\forfrdelige\begyndervanskelighederne\femmers.For';$Cust=$Atomicity.substring(66672,3);.$Cust($Atomicity)" |