5a86bf6cc9dc5251e398398436ca2fe6.exe

Classification: Malicious

5a86bf6cc9dc5251e398398436ca2fe6.exe is a malicious file sample. Reported by 2 threat sources, last seen 2024-02-05. Detected by 79 antivirus engines.

Detection summary

  • 79 antivirus detections
  • 1 IDS alerts
  • 1 processes observed
  • 1 contacted hosts
  • 0 DNS requests

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2024-02-05 10:00:03 2024-02-05 10:00:03
Stealc MalwareBazaar Abuse.ch 2024-02-05 09:45:46 2024-02-05 09:45:46 malicious-activity

Sample information

Filenames
5a86bf6cc9dc5251e398398436ca2fe6.exe
File type
PE32 executable (GUI) Intel 80386, for MS Windows
Size
318464 bytes
MD5
5a86bf6cc9dc5251e398398436ca2fe6
SHA-1
bb9c266ee3a7c18a18ae9882f90d08202763f1fa
SHA-256
8a12a7cfb07d4ea86f212911775850f6187eea3d7a9c070ae2d68e0b318266e5
First indexed
2024-02-05 09:46:24
Last updated
2026-09-03 00:42:58

Antivirus detections

EngineDetection
APEXMalicious
AVGFileRepMalware [Pws]
Acronissuspicious
AhnLab-V3Trojan/Win.Generic.R633909
AvastFileRepMalware [Pws]
BitDefenderThetaGen:NN.ZexaF.36744.tq0@auZo!nhG
BkavW32.AIDetectMalware
CAT-QuickHealRansom.Stop.P5
ClamAVWin.Packer.pkr_ce1a-9980177-0
CrowdStrikewin/malicious_confidence_100% (W)
Cybereasonmalicious.ee3a7c
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
Elasticmalicious (high confidence)
FireEyeGeneric.mg.5a86bf6cc9dc5251
GoogleDetected
GridinsoftRansom.Win32.STOP.tr!n
IkarusTrojan-Banker.IcedID
K7AntiVirusTrojan ( 005a60081 )
K7GWTrojan ( 005a60081 )
KasperskyUDS:DangerousObject.Multi.Generic
Kingsoftmalware.kb.a.1000
LionicTrojan.Win32.Generic.4!c
MaxSecureTrojan.Malware.300983.susgen
McAfeeArtemis!5A86BF6CC9DC
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
Rising[email protected] (RDML:w+jxoY7kWtjKGwzwI9ih9g)
SangforRansom.Win32.Save.a
SentinelOneStatic AI - Malicious PE
SkyhighBehavesLike.Win32.Lockbit.fh
SymantecML.Attribute.HighConfidence
TencentTrojan.Win32.Obfuscated.gen
Trapminemalicious.high.ml.score
WebrootW32.Malware.Gen
ZoneAlarmUDS:DangerousObject.Multi.Generic
tehtrisGeneric.Malware
ALYacGen:Variant.BrResMon.280
AVGWin32:MalwareX-gen [Cryp]
AlibabaTrojanPSW:Win32/LummaStealer.9ecf5bd9
Antiy-AVLTrojan/Win32.Kryptik
ArcabitTrojan.BrResMon.280
AvastWin32:MalwareX-gen [Cryp]
AviraTR/W32.MalwareX
BitDefenderGen:Variant.BrResMon.280
BkavW32.Malware.F7DF84E0
CTXexe.trojan.generic
CylanceUnsafe
DrWebTrojan.PWS.Siggen3.36032
ESET-NOD32Win32/Kryptik.HWFC trojan
EmsisoftGen:Variant.BrResMon.280 (B)
F-SecureTrojan.TR/W32.MalwareX
FortinetW32/Kryptik.HWFE!tr
GDataGen:Variant.BrResMon.280
JiangminTrojan.Agent.evpq
K7AntiVirusTrojan ( 005690671 )
K7GWTrojan ( 005690671 )
KasperskyHEUR:Trojan-PSW.Win32.Stealerc.gen
LionicTrojan.Win32.LummaStealer.i!c
MalwarebytesFabookie.Spyware.Stealer.DDS
MaxSecureTrojan.Malware.202870010.susgen
McAfeeDTrojan:Win/Glupteba.AQ!26
MicroWorld-eScanGen:Variant.BrResMon.280
MicrosoftTrojan:Win32/LummaStealer.ML!MTB
Paloaltogeneric.ml
PandaTrj/RansomGen.A
RisingTrojan.SmokeLoader!1.F5F7 (CLASSIC)
SangforTrojan.Win32.Save.a
SkyhighTrojan-FWPJ!5A86BF6CC9DC
SophosTroj/Krypt-VK
SymantecTrojan Horse
TrellixENSTrojan-FWPJ!5A86BF6CC9DC
TrendMicro-HouseCallTrojan.Win32.VSX.PE04CA3
VBA32TrojanRansom.Stealc
VIPREGen:Variant.BrResMon.280
VaristW32/Azorult.X.gen!Eldorado
VirITTrojan.Win32.Genus.VCG
XcitiumMalware@#3ud87dbvssaqe
ZoneAlarmTroj/Krypt-VK
alibabacloudTrojan[stealer]:Win/LummaStealer.ME8PHU

Network contacts

185.172.128.24

Process list

NameCommand line
5a86bf6cc9dc5251e398398436ca2fe6.exe