86.exe

Classification: Malicious

86.exe is a malicious file sample (Windows executable, 32.5 KB). Linked to Runningrat malware. Reported by 2 threat sources, last seen 2023-06-30.

Detection summary

  • 0 antivirus detections (88% detection ratio)
  • 0 IDS alerts
  • 4 processes observed
  • 1 contacted hosts
  • 1 DNS requests

MITRE ATT&CK associations

Malware families: RUNNINGRAT (S0253)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2023-06-30 17:00:03 2023-06-30 17:00:03
RunningRAT MalwareBazaar Abuse.ch 2023-05-13 22:45:22 2023-05-13 22:45:22 malicious-activity S0253 RunningRAT

Sample information

Filenames
86.exe, x86exe.exe
File type
PE32 executable (GUI) Intel 80386, for MS Windows, ...
Size
33280 bytes
MD5
8456c8dede98f1db930ae403bd2741a5
SHA-1
efb2571a9ed39f780546cdc4568fec905bb20c1d
SHA-256
93c75fff7e530e1f6d0c978dda74c2ab7014c278d5e065bd98225ba76466a851
First indexed
2023-05-13 23:18:51
Last updated
2023-06-30 17:00:03

Network contacts

36.156.191.158

DNS requests

sky.hobuff.info

Process list

NameCommand line
x86exe.exe
cmd.exe/c ping 127.0.0.1 -n 1 && del /f/q "C:\x86exe.exe"
PING.EXEping 127.0.0.1 -n 1
serivecs.exe%WINDIR%\system32\serivecs.exe "%WINDIR%\system32\21222250.dll",MainThread