farmers-dynasty-v0_69_PDA3AF.exe

Classification: Malicious

farmers-dynasty-v0_69_PDA3AF.exe is a malicious file sample. Linked to Bundlore malware. Reported by 1 threat source, last seen 2018-03-18.

Detection summary

  • 13 antivirus detections (19% detection ratio)
  • 0 IDS alerts
  • 0 processes observed
  • 12 contacted hosts
  • 12 DNS requests

MITRE ATT&CK associations

Malware families: BUNDLORE (S0482)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
bundlore Maltiverse 2018-03-18 14:00:35 2018-03-18 14:00:35 S0482 Bundlore

Tags

bundlore

Sample information

Filenames
farmers-dynasty-v0_69_PDA3AF.exe
File type
PE32 executable (GUI) Intel 80386, for MS Windows
Size
400448 bytes
MD5
fcc32863aca706bd6c032857cf2d4277
SHA-1
29a840ddb51d328771600cf14f43cfd38f54be42
SHA-256
9322cc79eb97c861e4b0ae43da735036a7d44ca356113109e0429a97e9d6e2db
SHA-512
ad11e4ee502759662a73154a06cd0a157cc4252424e5952d03536ca6e0614bb7ebf8507aa8ca79a67a464390aa1b3a1c6976fb285fcaaf0abf027ac3b4d355a7
First indexed
2018-03-18 14:00:35
Last updated
2025-11-11 02:28:50

Antivirus detections

EngineDetection
AhnLab-V3PUP/Win32.Filetour.R203929
AviraTR/Crypt.XPACK.Gen2
CrowdStrikemalicious_confidence_100% (D)
CylanceUnsafe
Endgamemalicious (high confidence)
IkarusPUA.FileTour
Invinceaheuristic
JiangminTrojan.Ekstak.cag
McAfeeAdware-FileTour
McAfee-GW-EditionAdware-FileTour
PandaTrj/Genetic.gen
Qihoo-360HEUR/QVM20.1.E7B5.Malware.Gen
SentinelOnestatic engine - malicious

Network contacts

206.54.161.139 18.195.243.179 46.28.69.36 52.59.159.209 217.69.139.122 217.69.139.245 3.13.3.69 217.69.139.110 94.100.180.110 35.158.245.249 217.69.139.247 217.69.139.252

DNS requests

xtnmailru.cdnmail.ru xmlbinupdate.mail.ru xml.binupdate.mail.ru mrds.mail.ru mailruupdater.cdnmail.ru kapulainen.ru gosoftdl.mail.ru goappsdl.distribmail.ru conserv.go.mail.ru bs.amigo.mail.ru binupdate.mail.ru amigobin.cdnmail.ru