b195c22e15188d7a28301bddfea3a6790ff522911f0eb1069292db17bcb62fa7
Classification: Malicious
b195c22e15188d7a28301bddfea3a6790ff522911f0eb1069292db17bcb62fa7 is a trojan (application/x-dosexec). Detected by 37 antivirus engines.
Detection summary
- 37 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: REVENGE RAT (S0379) ASYNCRAT (S1087)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| AsyncRAT | ThreatFox Abuse.ch | 2026-09-10 14:26:50 | 2026-09-10 15:25:16 | S1087 AsyncRAT | |
| RevengeRAT | Abuse.ch | 2021-09-21 08:36:36 | 2021-09-21 08:36:36 | malicious-activity | S0379 Revenge RAT |
Tags
win.asyncratSample information
- Filenames
- b195c22e15188d7a28301bddfea3a6790ff522911f0eb1069292db17bcb62fa7
- File type
- application/x-dosexec
- MD5
3632a4834bc8bb8e30036f9bb3f1fea9- SHA-1
1fabb23ac29b73081a3c4ee7741fc94d963bb23f- SHA-256
b195c22e15188d7a28301bddfea3a6790ff522911f0eb1069292db17bcb62fa7- First indexed
- 2021-09-21 09:15:13
- Last updated
- 2026-09-10 19:12:15
Antivirus detections
| Engine | Detection |
|---|---|
| Elastic | malicious (high confidence) |
| Cynet | Malicious (score: 100) |
| CAT-QuickHeal | Trojan.MsilFC.S7081623 |
| McAfee | GenericRXEC-TG!3632A4834BC8 |
| Cylance | Unsafe |
| Sangfor | Suspicious.Win32.Save.a |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cyren | W32/MSIL_Kryptik.CPL.gen!Eldorado |
| Symantec | ML.Attribute.HighConfidence |
| ESET-NOD32 | a variant of MSIL/TrojanDropper.Agent.DMA |
| APEX | Malicious |
| Kaspersky | HEUR:Trojan-Spy.MSIL.Generic |
| BitDefender | IL:Trojan.MSILZilla.2508 |
| MicroWorld-eScan | IL:Trojan.MSILZilla.2508 |
| Avast | Win32:DropperX-gen [Drp] |
| Ad-Aware | IL:Trojan.MSILZilla.2508 |
| Emsisoft | IL:Trojan.MSILZilla.2508 (B) |
| DrWeb | Trojan.MulDrop8.6654 |
| McAfee-GW-Edition | BehavesLike.Win32.Generic.jc |
| FireEye | Generic.mg.3632a4834bc8bb8e |
| Sophos | Mal/Generic-S |
| Ikarus | Trojan-Dropper.MSIL.Agent |
| GData | IL:Trojan.MSILZilla.2508 |
| Jiangmin | TrojanSpy.MSIL.aqem |
| Avira | TR/Dropper.Gen |
| MAX | malware (ai score=81) |
| Arcabit | IL:Trojan.MSILZilla.D9CC |
| Microsoft | Trojan:MSIL/AgentTesla.AQE!MTB |
| AhnLab-V3 | Trojan/Win32.Agent.C2576300 |
| Acronis | suspicious |
| ALYac | IL:Trojan.MSILZilla.2508 |
| Malwarebytes | MachineLearning/Anomalous.97% |
| SentinelOne | Static AI - Malicious PE |
| eGambit | Unsafe.AI_Score_100% |
| Fortinet | MSIL/Agent.DOZ!tr |
| BitDefenderTheta | Gen:NN.ZemsilF.34142.Qm0@aGtyU6p |
| AVG | Win32:DropperX-gen [Drp] |