KTJ8zjM1.posh
Classification: Malicious
KTJ8zjM1.posh is an infostealer (text/plain). Detected by 35 antivirus engines. Linked to Poshc2 malware. Reported by 1 threat source, last seen 2023-12-14.
Detection summary
- 35 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: POSHC2 (S0378)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| PoshC2 | MalwareBazaar Abuse.ch | 2023-12-14 14:46:06 | 2023-12-14 14:46:06 | malicious-activity | S0378 PoshC2 |
Sample information
- Filenames
- KTJ8zjM1.posh
- File type
- text/plain
- MD5
77b80cf5ca895e3097e4acb9e3d3a60f- SHA-1
37099edc2b5c263e19e39bf5e9bed37f9d5a9d57- SHA-256
a2da346478a552bd75a4a9152168607f107f4d39695878a4b064e65d31861629- First indexed
- 2023-12-14 15:18:23
- Last updated
- 2026-08-19 01:35:25
Antivirus detections
| Engine | Detection |
|---|---|
| Avira | TR/PShell.Spy.VPL |
| Cynet | Malicious (score: 99) |
| ESET-NOD32 | PowerShell/Spy.Agent.CR |
| F-Secure | Trojan.TR/PShell.Spy.VPL |
| Kaspersky | Trojan-Spy.PowerShell.FileTransfer.b |
| ZoneAlarm | Trojan-Spy.PowerShell.FileTransfer.b |
| ALYac | Generic.PWSH.Stealer.B.975434DC |
| AVG | Other:Malware-gen [Trj] |
| Arcabit | Generic.PWSH.Stealer.B.DEE24ADC |
| Avast | Other:Malware-gen [Trj] |
| BitDefender | Generic.PWSH.Stealer.B.975434DC |
| CAT-QuickHeal | PS.Trojan.48757 |
| CTX | powershell.trojan.filetransfer |
| DrWeb | PowerShell.Stealer.26 |
| ESET-NOD32 | PowerShell/Spy.Agent.CR trojan |
| Emsisoft | Generic.PWSH.Stealer.B.975434DC (B) |
| GData | Generic.PWSH.Stealer.B.975434DC |
| Detected | |
| Ikarus | Trojan.PowerShell.Spy |
| Kingsoft | Script.Troj.Generic.2023838 |
| Lionic | Trojan.Script.Stealer.l!c |
| McAfeeD | Trojan:Script/PSAgent.YA |
| MicroWorld-eScan | Generic.PWSH.Stealer.B.975434DC |
| Microsoft | Trojan:PowerShell/Malgent!MSR |
| NANO-Antivirus | Trojan.Script.ScreenshotSpy.laabwp |
| Rising | Spyware.Agent/PS!1.F42A (CLASSIC) |
| Sophos | ATK/ExfilDrop-A |
| Symantec | Infostealer |
| Tencent | Win32.Trojan-Spy.Filetransfer.Eflw |
| VIPRE | Generic.PWSH.Stealer.B.975434DC |
| Varist | PSH/Agent.RG |
| VirIT | Trojan.PS.Agent.BUS |
| ZoneAlarm | ATK/ExfilDrop-A |
| alibabacloud | Trojan[spy]:Win/Malgent.Gen |
| huorong | TrojanSpy/PS.Stealer.a |