a6b9710a78f50e1083d7e4c543c477fd6331c7ca47a50c71a182160e5741c1b6
Classification: Malicious
a6b9710a78f50e1083d7e4c543c477fd6331c7ca47a50c71a182160e5741c1b6 is a trojan (application/x-dosexec). Detected by 66 antivirus engines.
Detection summary
- 66 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: GH0ST RAT (S0032)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Ghost RAT | ThreatFox Abuse.ch | 2024-05-04 17:43:14 | 2024-05-05 21:09:53 | ||
| Gh0stRAT | MalwareBazaar Abuse.ch | 2024-05-03 21:28:55 | 2024-05-03 21:28:55 | malicious-activity | S0032 gh0st RAT |
Tags
win.ghost_rat farfli gh0st rat pcratSample information
- Filenames
- 59fd7df4625ce3480e806144a007080f
- File type
- application/x-dosexec
- MD5
59fd7df4625ce3480e806144a007080f- SHA-1
e16d898d304af9c9fae5ca78e3241ddd9fee8dc9- SHA-256
a6b9710a78f50e1083d7e4c543c477fd6331c7ca47a50c71a182160e5741c1b6- First indexed
- 2024-05-03 22:19:50
- Last updated
- 2026-10-17 21:45:21
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Gen:Trojan.Redosdru.!o!.1 |
| APEX | Malicious |
| AVG | Win32:Dropper-JQQ [Drp] |
| AhnLab-V3 | Trojan/Win32.Dialer.R29369 |
| Alibaba | TrojanDownloader:Win32/Farfli.98c83fb8 |
| Antiy-AVL | Trojan[Spy]/Win32.Agent.cdfh |
| Arcabit | Trojan.Redosdru.!o!.1 |
| Avast | Win32:Dropper-JQQ [Drp] |
| Avira | BDS/Zegost.bmnya |
| Baidu | Win32.Trojan.Dialer.a |
| BitDefender | Gen:Trojan.Redosdru.!o!.1 |
| BitDefenderTheta | Gen:NN.ZexaF.36804.Kyuaa4t5I0eb |
| Bkav | W32.AIDetectMalware |
| CAT-QuickHeal | Trojan.Aksula.A |
| ClamAV | Win.Malware.Generickdz-6957625-0 |
| Cylance | unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.DownLoader5.49351 |
| ESET-NOD32 | a variant of Win32/Farfli.XB |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Trojan.Redosdru.!o!.1 (B) |
| F-Secure | Backdoor.BDS/Zegost.bmnya |
| FireEye | Generic.mg.59fd7df4625ce348 |
| Fortinet | W32/Farfli.OC!tr |
| GData | Gen:Trojan.Redosdru.!o!.1 |
| Detected | |
| Gridinsoft | Trojan.Win32.Gen.sd!s1 |
| Ikarus | Trojan.Win32.Dialer |
| Jiangmin | TrojanSpy.Agent.tst |
| K7AntiVirus | Trojan ( 0055e3e41 ) |
| K7GW | Trojan ( 0055e3e41 ) |
| Kaspersky | Trojan-Spy.Win32.Agent.cdfh |
| Kingsoft | Win32.HeurC.KVM003.a |
| Lionic | Trojan.Win32.Generic.lNr1 |
| MAX | malware (ai score=83) |
| Malwarebytes | Generic.Malware.AI.DDS |
| MaxSecure | Trojan.Malware.4392273.susgen |
| McAfee | Corrupt-MS!59FD7DF4625C |
| MicroWorld-eScan | Gen:Trojan.Redosdru.!o!.1 |
| Microsoft | Backdoor:Win32/Farfli!pz |
| NANO-Antivirus | Trojan.Win32.Dwn.rkaxu |
| Paloalto | generic.ml |
| Panda | W32/P2PWorm.QD.worm |
| Rising | Backdoor.Zegost!1.9CDE (CLASSIC) |
| Sangfor | Suspicious.Win32.Save.ins |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | Corrupt-MS!59FD7DF4625C |
| Sophos | Mal/Generic-S |
| Symantec | SMG.Heur!gen |
| TACHYON | Trojan/W32.Agent.589824.JA |
| Tencent | Trojan.Win32.Spy.ecy |
| Trapmine | malicious.high.ml.score |
| TrendMicro | BKDR_ZEGOST.SM34 |
| TrendMicro-HouseCall | BKDR_ZEGOST.SM34 |
| VBA32 | SScope.Trojan.SvcHorse.01643 |
| VIPRE | Gen:Trojan.Redosdru.!o!.1 |
| Varist | W32/Trojan.NOSK-1596 |
| ViRobot | Trojan.Win32.A.Agent.430080.A |
| VirIT | Backdoor.Win32.Generic.BAA |
| Webroot | W32.Trojan.Gen |
| Xcitium | TrojWare.Win32.Kryptik.BHFS@56cp6y |
| Zillya | Trojan.Dialer.Win32.12199 |
| ZoneAlarm | Trojan-Spy.Win32.Agent.cdfh |
| alibabacloud | Backdoor:Win/Redosdru.1e6c7cd5 |
| tehtris | Generic.Malware |