97e152b4d7b1d3965648b7394986e7f330310dfea336e835c5cc5a33ed4f80c5

Classification: Malicious

97e152b4d7b1d3965648b7394986e7f330310dfea336e835c5cc5a33ed4f80c5 is a malicious file sample. Linked to Cobalt Strike malware.

Detection summary

  • 63 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: COBALT STRIKE (S0154)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Cobalt Strike Triage 2026-03-03 20:49:57 2026-03-03 20:49:57 malicious-activity S0154 Cobalt Strike

Tags

cobaltstrike backdoor trojan

Sample information

Filenames
97e152b4d7b1d3965648b7394986e7f330310dfea336e835c5cc5a33ed4f80c5
MD5
79abfaab11b2c5de134c4bd2821f87b5
SHA-1
e1e4a230d2f6d62678bbeee2af9f226579b6b003
SHA-256
97e152b4d7b1d3965648b7394986e7f330310dfea336e835c5cc5a33ed4f80c5
SHA-512
accf6927244f498453e8743aa4585044d98cf43789aba17f62ad06fd693f4c76f2db5f82887413e4ba33334dbc5862c4737770204c03994aebfa8430a75762cf
First indexed
2026-03-03 20:49:57
Last updated
2026-09-03 00:08:45

Antivirus detections

EngineDetection
ALYacGen:Variant.Application.Mikey.108320
AVGWin64:Evo-gen [Trj]
AhnLab-V3Trojan/Win.Generic.C4447468
AlibabaTrojan:Win64/Shelma.2704696f
Antiy-AVLTrojan/Win64.Shelma
ArcabitTrojan.Application.Mikey.D1A720
AvastWin64:Evo-gen [Trj]
AviraHEUR/AGEN.1318645
BitDefenderGen:Variant.Application.Mikey.108320
BkavW64.AIDetectMalware
CAT-QuickHealTrojan.Win64RI.S20968137
CTXexe.trojan.shelma
ClamAVWin.Malware.Shelma-9863151-0
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
CynetMalicious (score: 99)
DeepInstinctMALICIOUS
DrWebTrojan.MulDrop17.54984
ESET-NOD32Win64/Rozena_AGen.BO trojan
Elasticmalicious (high confidence)
EmsisoftGen:Variant.Application.Mikey.108320 (B)
F-SecureHeuristic.HEUR/AGEN.1318645
FortinetW64/Agent.CE99!tr
GDataGen:Variant.Application.Mikey.108320
GoogleDetected
GridinsoftTrojan.Win64.Wacatac.oa!s1
IkarusTrojan.Win64.Rozena
JiangminTrojan.Shelma.hys
K7AntiVirusRiskware ( 0040eff71 )
K7GWRiskware ( 0040eff71 )
KasperskyTrojan.Win64.Shelma.jxt
Kingsoftmalware.kb.a.932
LionicTrojan.Win64.Shelma.tt31
MalwarebytesTrojan.CobaltStrike
MaxSecureTrojan.Malware.133898145.susgen
McAfeeDti!97E152B4D7B1
MicroWorld-eScanGen:Variant.Application.Mikey.108320
MicrosoftTrojan:Win64/CobaltStrike.CG!MTB
Paloaltogeneric.ml
PandaTrj/GdSda.A
RisingTrojan.Shelma!8.1A3D (TFE:5:Mw4doJkweT)
SUPERAntiSpywareTrojan.Agent/Gen-Shelma
SangforTrojan.Win32.Save.a
SentinelOneStatic AI - Suspicious PE
SkyhighBehavesLike.Win64.Injector.fh
SophosTroj/Cobalt-KM
SymantecML.Attribute.HighConfidence
TencentTrojan.Win64.Rozena.16002570
Trapminemalicious.moderate.ml.score
TrellixENSGenericRXAA-AA!79ABFAAB11B2
TrendMicroBackdoor.Win64.COBEACON.YXGCCZ
TrendMicro-HouseCallBackdoor.Win64.COBEACON.YXGCCZ
VBA32Trojan.Win64.Shelma
VIPREGen:Variant.Application.Mikey.108320
VaristW64/ARisk.BA
ViRobotTrojan.Win.Z.Shelma.364544.DUT
VirITTrojan.Win64.Genus.JAY
WebrootW32.Malware.Gen
YandexTrojan.Shelma!Se62mB7Pb2E
ZillyaTrojan.Shelma.Win64.5223
ZoneAlarmTroj/Cobalt-KM
alibabacloudTrojan:Win/Rozena_AGen.592fd585
huorongHVM:Backdoor/Mikey.a