a201cfc29ea98a499a42ce0def43a1a2394ee980651791d3b46ff258fc03c151
Classification: Malicious
a201cfc29ea98a499a42ce0def43a1a2394ee980651791d3b46ff258fc03c151 is a trojan (Windows executable, 376.0 KB). Linked to Maze malware.
Detection summary
- 58 antivirus detections (12% detection ratio)
- 0 IDS alerts
- 2 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Ransom.Maze |
Hybrid-Analysis |
2020-07-31 18:00:20 |
2020-07-31 18:00:20 |
|
S0449 Maze
|
Sample information
- Filenames
- fa73f50d62ba1a469c4bd2cac80df838
- File type
- PE32 executable (DLL) (GUI) Intel 80386, for MS Wi ...
- Size
- 385024 bytes
- MD5
fa73f50d62ba1a469c4bd2cac80df838- SHA-1
20788c68934830fbe11e885003c7792e2ba23839- SHA-256
a201cfc29ea98a499a42ce0def43a1a2394ee980651791d3b46ff258fc03c151- First indexed
- 2020-07-31 18:00:20
- Last updated
- 2026-09-24 02:15:51
Antivirus detections
| Engine | Detection |
|---|
| FireEye | Generic.mg.fa73f50d62ba1a46 |
| Invincea | heuristic |
| Symantec | Ransom.Maze!gm |
| APEX | Malicious |
| Rising | Malware.Heuristic!ET#87% (RDMK:cmRtazrQlsyQ0isJih7SijCz/pRg) |
| Endgame | malicious (high confidence) |
| SentinelOne | DFI - Malicious PE |
| Microsoft | Ransom:Win32/Maze.PA!MTB |
| Ikarus | Trojan-Ransom.Maze |
| ALYac | Trojan.Ransom.Maze |
| AhnLab-V3 | Trojan/Win32.Ransomlock.C4178058 |
| Alibaba | Ransom:Win32/Ransomware.2edfe7d3 |
| Antiy-AVL | Trojan[Ransom]/Win32.Dcrypt.a |
| Arcabit | Trojan.Agent.EUKG |
| BitDefender | Trojan.Agent.EUKG |
| Bkav | W32.AIDetectMalware |
| CAT-QuickHeal | Trojan.Ghanarava.17139149610df838 |
| CTX | dll.ransomware.maze |
| ClamAV | Win.Ransomware.Maze-9941257-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Encoder.30550 |
| Elastic | Windows.Ransomware.Maze |
| Emsisoft | Trojan.Agent.EUKG (B) |
| Fortinet | W32/Maze.6A5B!tr.ransom |
| GData | Trojan.Agent.EUKG |
| Google | Detected |
| Gridinsoft | Ransom.Win32.Generic.oa!s1 |
| Kingsoft | malware.kb.a.980 |
| Lionic | Trojan.Win32.Maze.4!c |
| Malwarebytes | Generic.Malware.AI.DDS |
| MaxSecure | Trojan.Malware.104538959.susgen |
| McAfee | Artemis!FA73F50D62BA |
| McAfeeD | Real Protect-LS!FA73F50D62BA |
| MicroWorld-eScan | Trojan.Agent.EUKG |
| Paloalto | generic.ml |
| Panda | Trj/CI.A |
| Rising | Ransom.Maze!1.BE87 (CLASSIC) |
| Sangfor | Trojan.Win32.Save.a |
| SentinelOne | Static AI - Suspicious PE |
| Skyhigh | Artemis!Trojan |
| Sophos | Mal/Generic-S |
| TACHYON | Trojan/W32.Agent.385024.ACR |
| TrendMicro-HouseCall | Trojan.Win32.VSX.PE04C9V |
| VBA32 | Trojan.Maze |
| VIPRE | Trojan.Agent.EUKG |
| Varist | W32/ABRansom.FWAZ-5693 |
| Xcitium | Malware@#psx931za2xp7 |
| alibabacloud | Trojan:Win/Maze.PM8PHU |
| huorong | Ransom/ChaCha.a |
| CTX | dll.trojan.maze |
| Malwarebytes | Generic.Malware.Gen.DDS |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win32.Generic.fh |
| TrellixENS | Artemis!FA73F50D62BA |
| TrendMicro-HouseCall | Trojan.Win32.VSX.PE04C9n |
| alibabacloud | Ransomware:Win/Maze.C |
Process list
| Name | Command line |
|---|
| <Ignored Process> | |
| regsvr32.exe | /s "C:\fa73f50d62ba1a469c4bd2cac80df838.dll" |