941993f885957176d75f24ef3f8935ecb589bb9b445bb0d71fb18b65e61b6ee4.exe

Classification: Malicious

941993f885957176d75f24ef3f8935ecb589bb9b445bb0d71fb18b65e61b6ee4.exe is a malicious file sample. Linked to Mustang Panda activity.

Detection summary

  • 52 antivirus detections
  • 20 IDS alerts
  • 0 processes observed
  • 7 contacted hosts
  • 10 DNS requests

MITRE ATT&CK associations

Intrusion sets: MUSTANG PANDA (G0129)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-04-19 19:45:04 2026-04-19 20:45:08
Generic Malware Cyber Threat Alliance 2026-03-11 11:05:31 2026-03-11 11:05:31
Generic.Malware MalwareBazaar Abuse.ch 2026-01-29 08:13:59 2026-01-29 08:13:59 malicious-activity
MustangPanda MalwareBazaar Abuse.ch 2026-01-29 08:13:59 2026-01-29 08:13:59 malicious-activity G0129 Mustang Panda

Tags

infostealer

Sample information

Filenames
941993f885957176d75f24ef3f8935ecb589bb9b445bb0d71fb18b65e61b6ee4.exe, 941993f885957176d75f24ef3f8935ecb589bb9b445bb0d71fb18b65e61b6ee4
File type
exe
MD5
e1b7ef0f3ac0a0a64f86e220f362b149
SHA-1
78cee623d06696ee31b25aa4e1b07c5724b1f7b7
SHA-256
941993f885957176d75f24ef3f8935ecb589bb9b445bb0d71fb18b65e61b6ee4
First indexed
2026-01-29 08:13:59
Last updated
2026-03-11 11:05:31

Antivirus detections

EngineDetection
ALYacTrojan.PSW.Predator
APEXMalicious
AVGWin32:MalwareX-gen [Misc]
AhnLab-V3Malware/Win.AGEN.C5605568
ArcabitTrojan.Generic.D4B0FE1B
AvastWin32:MalwareX-gen [Misc]
AviraTR/AD.PredatorThief.dwwzo
BitDefenderTrojan.GenericKD.78708251
CAT-QuickHealTrojan.Ghanarava.171177999362b149
CTXexe.trojan.agentb
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
CynetMalicious (score: 99)
DeepInstinctMALICIOUS
DrWebTrojan.Siggen32.21113
ESET-NOD32Win32/PSW.Agent.OUG trojan
Elasticmalicious (high confidence)
EmsisoftTrojan.GenericKD.78708251 (B)
F-SecureTrojan.TR/AD.PredatorThief.dwwzo
FortinetPossibleThreat.PALLAS.M
GDataTrojan.GenericKD.78708251
GoogleDetected
IkarusTrojan.PredatorThief
K7AntiVirusPassword-Stealer ( 0068dbd61 )
K7GWPassword-Stealer ( 0068dbd61 )
KasperskyHEUR:Trojan.Win32.Agentb.gen
LionicTrojan.Win32.Agentb.X!c
MalwarebytesMalware.AI.4051512955
MaxSecureTrojan.Malware.237900065.susgen
McAfeeDti!941993F88595
MicroWorld-eScanTrojan.GenericKD.78708251
MicrosoftTrojan:Win32/Etset!rfn
Paloaltogeneric.ml
PandaTrj/PhxBzA.A
RisingStealer.Agent!8.C2 (KTSE)
SangforTrojan.Win32.Save.a
SkyhighBehavesLike.Win32.Infected.ch
SophosMal/Generic-S
SymantecTrojan Horse
TencentMalware.Win32.Gencirc.10c43967
TrellixENSArtemis!E1B7EF0F3AC0
TrendMicroTROJ_FRS.VSNTAT26
TrendMicro-HouseCallTROJ_FRS.VSNTAT26
VBA32Trojan.Agentb
VIPRETrojan.GenericKD.78708251
VaristW32/ABTrojan.RIDE-5114
ViRobotTrojan.Win.Z.Agent.833024.AJ
VirITTrojan.Win32.GenusC.JBT
WebrootW32.Trojan.Gen
ZillyaTrojan.Agent.Win32.4433186
alibabacloudTrojan:Win/Agentb.gyf
huorongTrojan/Generic!7889C0E396B25911

Network contacts

99.84.160.115 52.123.249.168 151.101.65.44 150.171.22.12 104.254.150.241 142.251.211.138 184.25.255.91

DNS requests

aefd.nelreports.net edge-consumer-static.azureedge.net edgeassetservice.azureedge.net ib.adnxs.com m.adnxs.com px.ads.linkedin.com r.msftstatic.com sb.scorecardresearch.com trc.taboola.com www.googleapis.com