9d9853bf843f8fc221ff1ccf04e08c331d7e0a43b33280767c6c6f96c64b2044

Classification: Malicious

9d9853bf843f8fc221ff1ccf04e08c331d7e0a43b33280767c6c6f96c64b2044 is a trojan (Windows executable, 99.5 KB). Linked to Remexi malware.

Detection summary

  • 79 antivirus detections (52% detection ratio)
  • 0 IDS alerts
  • 2 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: REMEXI (S0375)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Trojan.Remexi Hybrid-Analysis 2019-02-04 06:45:03 2019-02-04 06:45:03 S0375 Remexi

Sample information

Filenames
ecae141bb068131108c1cd826c82d88b.exe
File type
PE32 executable (console) Intel 80386 (stripped to ...
Size
101888 bytes
MD5
ecae141bb068131108c1cd826c82d88b
SHA-1
3a3c1ab56f8d7b6bb17be30688fe3ca50116c64b
SHA-256
9d9853bf843f8fc221ff1ccf04e08c331d7e0a43b33280767c6c6f96c64b2044
First indexed
2019-02-04 06:45:03
Last updated
2026-09-30 03:20:23

Antivirus detections

EngineDetection
MicroWorld-eScanTrojan.GenericKD.40940926
CAT-QuickHealTrojan.Remexi
McAfeeRDN/Generic PWS.y
BitDefenderTrojan.GenericKD.40940926
K7GWSpyware ( 00545f881 )
K7AntiVirusSpyware ( 00545f881 )
Invinceaheuristic
NANO-AntivirusTrojan.Win32.Remexi.flxwoa
SymantecBackdoor.Exemyr!g2
ESET-NOD32a variant of Win32/Spy.Agent.PAY
Paloaltogeneric.ml
KasperskyHEUR:Trojan.Win32.Remexi.gen
AegisLabTrojan.Win32.Remexi.4!c
AvastFileRepMalware
TencentWin32.Trojan.Remexi.Anpu
Ad-AwareTrojan.GenericKD.40940926
SophosMal/Generic-S
ComodoMalware@#1y2fcm1nqnbbx
F-SecureTrojan.GenericKD.40940926
McAfee-GW-EditionRDN/Generic PWS.y
EmsisoftTrojan.GenericKD.40940926 (B)
WebrootW32.Trojan.GenKD
AviraTR/Spy.Agent.amdim
MAXmalware (ai score=84)
Endgamemalicious (moderate confidence)
ArcabitTrojan.Generic.D270B57E
ViRobotTrojan.Win32.Z.Remexi.101888
ZoneAlarmHEUR:Trojan.Win32.Remexi.gen
MicrosoftTrojan:Win32/Casdet!rfn
ALYacTrojan.Agent.Remexi
TACHYONTrojan-Spy/W32.Agent.101888.O
RisingSpyware.Agent!8.C6 (CLOUD)
GDataTrojan.GenericKD.40940926
AVGFileRepMalware
Qihoo-360Win32/Trojan.f01
AVGWin32:Trojan-gen
AhnLab-V3Malware/Win.Generic.C4817695
AlibabaTrojanSpy:Win32/Remexi.5a1fcbd9
Antiy-AVLTrojan[APT]/Win32.Apt39
ArcabitTrojan.Generic.D14BB3
AvastWin32:Trojan-gen
BitDefenderTrojan.GenericKDZ.84915
BitDefenderThetaGen:NN.ZexaF.36744.gGW@aK0eI@b
BkavW32.Common.F08CEBE3
ClamAVWin.Trojan.Remexi-6979034-0
CrowdStrikewin/malicious_confidence_100% (W)
Cylanceunsafe
CynetMalicious (score: 99)
DeepInstinctMALICIOUS
Elasticmalicious (high confidence)
EmsisoftTrojan.GenericKDZ.84915 (B)
F-SecureTrojan.TR/Spy.Agent.amdim
FireEyeTrojan.GenericKDZ.84915
FortinetW32/Agent.PAY!tr
GDataTrojan.GenericKDZ.84915
GoogleDetected
GridinsoftTrojan.Win32.Agent.oa!s1
IkarusTrojan.Win32.Injector
Kingsoftmalware.kb.a.811
LionicTrojan.Win32.Remexi.4!c
MAXmalware (ai score=100)
MalwarebytesMalware.AI.3775153186
MaxSecureTrojan.Malware.9814117.susgen
McAfeeTrojan-FQRO!ECAE141BB068
MicroWorld-eScanTrojan.GenericKDZ.84915
PandaTrj/GdSda.A
RisingSpyware.Agent!8.C6 (KTSE)
SangforTrojan.Win32.Chafer.IOC
SkyhighTrojan-FQRO!ECAE141BB068
SymantecML.Attribute.HighConfidence
TencentMalware.Win32.Gencirc.115d2e1b
TrendMicroTROJ_FRS.0NA103CJ21
TrendMicro-HouseCallTROJ_FRS.0NA103CJ21
VBA32BScope.Trojan.Remexi
VIPRETrojan.GenericKDZ.84915
WebrootW32.Trojan.Gen
XcitiumMalware@#1y2fcm1nqnbbx
YandexTrojanSpy.Agent!Qwv6gHYZvYA
ZillyaTrojan.Agent.Win32.1038907

Process list

NameCommand line
ecae141bb068131108c1cd826c82d88b.exe
WmiPrvSE.exe