96a6106dd370bcada26624148d9468f4ca4a0a78987dd0efff28cdd2c85ad454
Classification: Malicious
96a6106dd370bcada26624148d9468f4ca4a0a78987dd0efff28cdd2c85ad454 is a trojan (Windows executable). Detected by 54 antivirus engines.
Detection summary
- 54 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 1 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: PURECRYPTER (S9019)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-09-05 22:45:07 | 2026-09-05 22:45:07 | malicious-activity | |
| PureCrypter | ThreatFox Abuse.ch | 2024-08-07 21:55:58 | 2024-08-09 21:19:18 | S9019 PureCrypter |
Tags
win.purecrypter evasion port_knockingSample information
- Filenames
- 96a6106dd370bcada26624148d9468f4ca4a0a78987dd0efff28cdd2c85ad454
- File type
- PE32 executable for MS Windows 4.00 (GUI), Intel i ...
- MD5
10fd54c23f62111dc8d0825161c5952e- SHA-1
c4e2c1ef99996185913a29c9d8901f765a84bfdc- SHA-256
96a6106dd370bcada26624148d9468f4ca4a0a78987dd0efff28cdd2c85ad454- First indexed
- 2024-08-07 22:17:06
- Last updated
- 2026-09-07 11:31:38
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Gen:Variant.Lazy.577533 |
| APEX | Malicious |
| AVG | Win32:MalwareX-gen [Trj] |
| AhnLab-V3 | Trojan/Win.Generic.C5654877 |
| Alibaba | Backdoor:MSIL/PureLogStealer.25c75d59 |
| Arcabit | Trojan.Marsilia.D22395 |
| Avast | Win32:MalwareX-gen [Trj] |
| Avira | TR/Dropper.Gen |
| BitDefender | Gen:Variant.Lazy.577533 |
| BitDefenderTheta | Gen:NN.ZemsilF.36810.sm0@a4OaI3 |
| Bkav | W32.AIDetectMalware.CS |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cybereason | malicious.23f621 |
| Cylance | Unsafe |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Siggen29.14627 |
| ESET-NOD32 | a variant of MSIL/Kryptik.ALXP |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Variant.Lazy.577533 (B) |
| F-Secure | Trojan.TR/Dropper.Gen |
| FireEye | Generic.mg.10fd54c23f62111d |
| Fortinet | MSIL/Generik.BZNYUMT!tr |
| GData | Gen:Variant.Lazy.577533 |
| Detected | |
| Gridinsoft | Trojan.Win32.Kryptik.sa |
| Ikarus | Win32.Outbreak |
| K7AntiVirus | Trojan ( 005b7dbb1 ) |
| K7GW | Trojan ( 005b7dbb1 ) |
| Kaspersky | HEUR:Backdoor.MSIL.Crysan.gen |
| Kingsoft | malware.kb.c.1000 |
| Lionic | Trojan.Win32.Crysan.m!c |
| MAX | malware (ai score=82) |
| Malwarebytes | MachineLearning/Anomalous.100% |
| MaxSecure | Trojan.Malware.300983.susgen |
| McAfee | Artemis!10FD54C23F62 |
| McAfeeD | Real Protect-LS!10FD54C23F62 |
| MicroWorld-eScan | Gen:Variant.Lazy.577533 |
| Microsoft | Trojan:MSIL/PureLogStealer.RNAA!MTB |
| Paloalto | generic.ml |
| Rising | Malware.Obfus/[email protected] (RDM.MSIL2:XcSHRbavAQcOnxikXYd2CQ) |
| Sangfor | Backdoor.Msil.Purelogstealer.Vxm8 |
| SentinelOne | Static AI - Malicious PE |
| Sophos | Mal/Generic-S |
| Symantec | ML.Attribute.HighConfidence |
| Tencent | Msil.Backdoor.Crysan.Gkjl |
| TrendMicro | TROJ_GEN.R002C0DH624 |
| TrendMicro-HouseCall | TROJ_GEN.R002C0DH624 |
| VIPRE | Gen:Variant.Lazy.577533 |
| Varist | W32/ABRisk.QWDP-4974 |
| VirIT | Trojan.Win32.MSIL_Heur.A |
| Webroot | W32.Malware.Gen |
| ZoneAlarm | HEUR:Backdoor.MSIL.Crysan.gen |
| alibabacloud | Backdoor:MSIL/PureLogStealer.RTZO3DGW |
| tehtris | Generic.Malware |