a64c3e0522fad787b95bfb6a30c3aed1b5786e69e88e023c062ec7e5cebf4d3e_1.exe

Classification: Malicious

a64c3e0522fad787b95bfb6a30c3aed1b5786e69e88e023c062ec7e5cebf4d3e_1.exe is a trojan (application/x-dosexec, 114.3 KB). Detected by 66 antivirus engines.

Detection summary

  • 66 antivirus detections
  • 0 IDS alerts
  • 1 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: HERMETICWIPER (S0697)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Hermeticwiper Triage 2026-06-13 06:55:55 2026-10-17 15:51:42 malicious-activity S0697 HermeticWiper
Generic Malware Cyber Threat Alliance 2026-08-08 10:00:55 2026-08-26 10:23:10 malicious-activity
Generic Malware Hybrid-Analysis 2025-04-26 18:00:04 2026-07-07 13:45:03 malicious-activity
HermeticWiper MalwareBazaar Abuse.ch 2022-03-29 17:29:30 2022-03-29 17:29:30 malicious-activity S0697 HermeticWiper
Generic.Malware MalwareBazaar Abuse.ch 2022-03-29 17:29:30 2022-03-29 17:29:30 malicious-activity

Tags

backdoor botnet infostealer mirai njrat qakbot rat hermeticwiper wiper

Sample information

Filenames
a64c3e0522fad787b95bfb6a30c3aed1b5786e69e88e023c062ec7e5cebf4d3e.exe, a64c3e0522fad787b95bfb6a30c3aed1b5786e69e88e023c062ec7e5cebf4d3e, a64c3e0522fad787b95bfb6a30c3aed1b5786e69e88e023c062ec7e5cebf4d3e_1.exe
File type
application/x-dosexec
Size
117000 bytes
MD5
ffea1266b09abbf0ceb59119746d8630
SHA-1
5df6d407f4629b9e4765ed96f19caf9a0710c2f8
SHA-256
a64c3e0522fad787b95bfb6a30c3aed1b5786e69e88e023c062ec7e5cebf4d3e
First indexed
2022-03-29 19:15:10
Last updated
2026-08-27 06:05:35

Antivirus detections

EngineDetection
ALYacTrojan.Agent.HermeticWiper
APEXMalicious
AVGWin32:DangerousSig [Trj]
AhnLab-V3Trojan/Win.Hermeticwiper.R478319
AlibabaTrojan:Win32/HermeticWiper.b468bb5b
Antiy-AVLTrojan/Win32.HermeticWiper.a
ArcabitGeneric.HermeticWiper.A.6E99D0F3
AvastWin32:DangerousSig [Trj]
AviraTR/Agent.abfu
BitDefenderGeneric.HermeticWiper.A.6E99D0F3
BkavW32.AIDetectMalware
CAT-QuickHealTrojan.HrmetcWipr.S26876287
CTXexe.trojan.generic
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
CynetMalicious (score: 99)
DeepInstinctMALICIOUS
DrWebTrojan.KillDisk.14086
ESET-NOD32a variant of Win32/GenCBL.BSP
ElasticWindows.Wiper.HermeticWiper
EmsisoftMalCert-S.OE (A)
F-SecureTrojan.TR/Agent.abfu
FireEyeGeneric.HermeticWiper.A.6E99D0F3
FortinetW32/KillDisk.NCV!tr
GDataWin32.Malware.HermeticWiper.B
GoogleDetected
GridinsoftTrojan.Win32.Agent.oa!s1
IkarusTrojan.Win32.Generic
JiangminTrojan.Agent.dvmb
K7AntiVirusTrojan ( 0058ec201 )
K7GWTrojan ( 0058ec201 )
KasperskyTrojan.Win32.HermeticWiper.a
Kingsoftmalware.kb.a.808
LionicTrojan.Win32.HermeticWiper.tsyQ
MalwarebytesGenCBL.Ransom.FileCryptor.DDS
McAfeeHerm-Wiper!FFEA1266B09A
McAfeeDti!A64C3E0522FA
MicroWorld-eScanGeneric.HermeticWiper.A.6E99D0F3
MicrosoftTrojan:Win32/FoxBlade.A!dha
Paloaltogeneric.ml
PandaTrj/HermeticWiper.A
RisingTrojan.HermeticWiper!1.DC1D (CLASSIC)
SangforTrojan.Win32.Hermeticwiper.Vn5y
SkyhighBehavesLike.Win32.HWipr.ch
SophosMal/Isher-Gen
SymantecTrojan.KillDisk
TACHYONTrojan/W32.HermeticWiper.117000
TencentMalware.Win32.Gencirc.10bec770
TrendMicroTrojan.Win32.KILLDISK.YXCCOZ
TrendMicro-HouseCallTrojan.Win32.KILLDISK.YXCCOZ
VBA32Trojan.HermeticWiper
VIPREGeneric.HermeticWiper.A.6E99D0F3
VaristW32/Agent.OSPU-6752
VirITTrojan.Win32.HermeticWiper.A
XcitiumMalware@#1qiaqx3p3ji5h
ZillyaTrojan.GenCBL.Win32.5822
ZoneAlarmMal/Isher-Gen
alibabacloudTrojan:Win/HermeticWiper.a
huorongTrojan/Generic!E29C33DCD6C3E79C
LionicTrojan.Win32.HermeticWiper.4!c
MaxSecureTrojan.Malware.140787675.susgen
SangforTrojan.Win32.Hermeticwiper.Vmt4
SophosMal/BadCert-Gen
WebrootW32.Trojan.Hermeticwiper
ZoneAlarmTrojan.Win32.HermeticWiper.a
alibabacloudTrojan:Win/Hermeticwiper.daee154d

Process list

NameCommand line
<Input Sample>