Classification: Malicious
Kelk_2010_full.exe is a malicious file sample. Reported by 2 threat sources, last seen 2026-09-02. Detected by 10 antivirus engines.
Detection summary
- 10 antivirus detections
- 0 IDS alerts
- 2 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Suspicious Sample |
Triage |
2026-09-02 16:59:14 |
2026-09-02 16:59:14 |
anomalous-activity
|
|
| Generic Malware |
Hybrid-Analysis |
2024-09-07 07:15:04 |
2024-09-07 08:15:06 |
|
|
Tags
adware
bootkit
discovery
installer
persistence
spyware
upx
Sample information
- Filenames
- Kelk_2010_full.exe
- File type
- PE32 executable (GUI) Intel 80386, for MS Windows
- Size
- 101012983 bytes
- MD5
72891cd748e341f9fab5fdf8b5c39d6f- SHA-1
da06a7bcca3bebdcabb1b1f437dede253be609b6- SHA-256
b1b876493b74ad12ecff5c4c92941cc549d509c857ec1d0c4ad93a34a3837ad9- First indexed
- 2024-09-07 06:54:10
- Last updated
- 2026-09-02 18:01:22
Antivirus detections
| Engine | Detection |
|---|
| AVG | Win32:Malware-gen |
| Avast | Win32:Malware-gen |
| Bkav | W32.AIDetectMalware |
| DeepInstinct | MALICIOUS |
| F-Secure | Trojan.TR/Crypt.TPM.Gen |
| Fortinet | W32/SPNR.04CN11!tr |
| Ikarus | Trojan.Crypt |
| Rising | Malware.Undefined!8.C (CLOUD) |
| Skyhigh | Artemis |
| VBA32 | BScope.Trojan.Agentb |
Process list
| Name | Command line |
|---|
| Kelk_2010_full.exe | |
| Kelk_2010_full.tmp | /SL5="$602BA,100639120,130560,C:\Kelk_2010_full.exe" |