48.exe
Classification: Malicious
48.exe is a trojan (Windows executable). Detected by 39 antivirus engines. Linked to Wiper malware. 4 sightings from VM-Ray, last seen 2022-09-11.
Detection summary
- 39 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: WIPER (S0041)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Backdoor | VM-Ray | 2022-09-11 19:19:17 | 2022-09-11 19:19:17 | ||
| Ransomware | VM-Ray | 2022-09-11 19:19:17 | 2022-09-11 19:19:17 | ||
| Wiper | VM-Ray | 2022-09-11 19:19:17 | 2022-09-11 19:19:17 | S0041 Wiper | |
| Injector | VM-Ray | 2022-09-11 19:19:17 | 2022-09-11 19:19:17 |
Sample information
- Filenames
- 48.exe
- File type
- PE32 executable (GUI) Intel 80386, for MS Windows
- SHA-256
8baff35c31174af5b8605462b96028fee8ccee8756c0a5d752733f98d2f442e7- First indexed
- 2022-09-11 18:54:59
- Last updated
- 2026-08-28 12:50:28
Antivirus detections
| Engine | Detection |
|---|---|
| tehtris | Generic.Malware |
| MicroWorld-eScan | Gen:Variant.Babar.29036 |
| FireEye | Generic.mg.383d9074a47f8d89 |
| ALYac | Gen:Variant.Babar.29036 |
| Cylance | Unsafe |
| Cybereason | malicious.4a47f8 |
| BitDefenderTheta | AI:Packer.6F4F21C21F |
| Symantec | Infostealer |
| Elastic | malicious (moderate confidence) |
| ESET-NOD32 | a variant of Win32/TrojanDropper.Agent.SRP |
| APEX | Malicious |
| Kaspersky | Trojan.Win32.Agentb.jiad |
| BitDefender | Gen:Variant.Babar.29036 |
| Avast | Win32:Evo-gen [Trj] |
| Ad-Aware | Gen:Variant.Babar.29036 |
| Emsisoft | Gen:Variant.Babar.29036 (B) |
| F-Secure | Trojan.TR/Crypt.XPACK.Gen |
| VIPRE | Gen:Variant.Babar.29036 |
| McAfee-GW-Edition | BehavesLike.Win32.Generic.cc |
| Trapmine | suspicious.low.ml.score |
| Sophos | Generic ML PUA (PUA) |
| Ikarus | Trojan.Win32.Tnega |
| GData | Win32.Trojan.PSE.10RFCRV |
| Detected | |
| Avira | TR/Crypt.XPACK.Gen |
| MAX | malware (ai score=87) |
| Arcabit | Trojan.Babar.D716C |
| ZoneAlarm | Trojan.Win32.Agentb.jiad |
| Microsoft | Backdoor:Win32/Remcos!MTB |
| Cynet | Malicious (score: 100) |
| Acronis | suspicious |
| VBA32 | BScope.Trojan.Nitol |
| Malwarebytes | Malware.Heuristic.1003 |
| Yandex | Trojan.GenAsa!zu0ZmwSfx40 |
| SentinelOne | Static AI - Suspicious PE |
| MaxSecure | Trojan.Malware.300983.susgen |
| Fortinet | W32/Tiny.NFR!tr |
| AVG | Win32:Evo-gen [Trj] |
| CrowdStrike | win/malicious_confidence_60% (D) |