file.exe
Classification: Malicious
file.exe is a malicious file sample. Reported by 3 threat sources, last seen 2026-09-02. IoC context and downloadable threat intel on Maltiverse.
Detection summary
- 0 antivirus detections
- 4 IDS alerts
- 0 processes observed
- 33 contacted hosts
- 35 DNS requests
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-09-02 11:45:04 | 2026-09-02 11:45:04 | malicious-activity | |
| Phorphiex | Triage | 2026-09-02 11:10:27 | 2026-09-02 11:10:27 | malicious-activity | |
| Phorphiex | MalwareBazaar Abuse.ch | 2026-09-02 11:09:58 | 2026-09-02 11:09:58 | malicious-activity |
Tags
malicious suspicious phorphiex discovery loader trojan wormSample information
- Filenames
- file.exe, nm.exe, file
- File type
- PE32 executable for MS Windows 5.00 (GUI), Intel i ...
- MD5
fd8de52397ce7670431d596a8c937209- SHA-1
b0985e5dc2152041cb6fc3f8f92c3a8379febfd0- SHA-256
a90a6af118da9ac10ef808e2628255365a8d103576792367ff62fd0f691940c1- First indexed
- 2026-09-02 11:09:58
- Last updated
- 2026-09-02 11:58:52
Network contacts
77.88.21.249 104.16.184.241 178.16.55.240 98.136.96.75 212.227.15.138 212.27.48.7 67.195.204.75 93.17.128.165 188.125.72.74 91.235.53.42 80.12.24.83 52.101.73.155 67.195.204.82 213.209.1.129 172.253.116.26 203.216.254.88 207.207.210.229 106.10.248.74 117.53.116.15 212.10.10.64 80.12.26.32 34.141.161.132 2.207.151.53 170.57.134.22 212.180.1.57 192.252.154.117 63.35.77.42 52.101.9.22 217.74.65.64 52.101.68.16 52.101.73.14 52.101.41.3 104.16.185.241
DNS requests
126.com 126mx03.mxmail.netease.com 163.com 163mx01.mxmail.netease.com 1statravels.com 21cn.com 321.com 9online.fr ASPMX3.googlemail.COM HBL0.mx2.cloud-mail.jp abv.bg addcom.de ahoo.coid aim.com airforceemail.net airpost.org alice.de alice.it aliceadsl.fr alt1.aspmx.l.google.com alt2.aspmx.l.google.com alt3.aspmx.l.google.com alt4.aspmx.l.google.com alternative-email-service.info ang.af.mil aol.co.uk aol.com aol.de aol.fr aol.net apc.olc.protection.outlook.com arcor.de icanhazip.com mx.yandex.ru yandex.ru