2026-09-07_0ead44799fdb8fe389b89fd87a8322bf_amadey_cloudeye_coinminer_dragonforce_elex_emotet_glassworm_hacktools_icedid_mimikatz_qilin_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_wannacry
Classification: Malicious
2026-09-07_0ead44799fdb8fe389b89fd87a8322bf_amadey_cloudeye_coinminer_dragonforce_elex_emotet_glassworm_hacktools_icedid_mimikatz_qilin_redline-stealer_remco…
Detection summary
- 58 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: MIMIKATZ (S0002)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Mimikatz | Triage | 2026-09-09 07:11:23 | 2026-09-09 07:11:23 | malicious-activity | S0002 Mimikatz |
Tags
mimikatz discovery execution installerSample information
- Filenames
- 2026-09-07_0ead44799fdb8fe389b89fd87a8322bf_amadey_cloudeye_coinminer_dragonforce_elex_emotet_glassworm_hacktools_icedid_mimikatz_qilin_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_wannacry
- SHA-256
b4ec2d6b501e4f1877e823fb7d148ccd9266d973fafbe196a1ad22695ce96cb5- First indexed
- 2026-09-09 07:11:23
- Last updated
- 2026-10-12 01:29:23
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Gen:Variant.Application.Graftor.700094 |
| APEX | Malicious |
| AVG | Win32:Malware-gen |
| Acronis | suspicious |
| AhnLab-V3 | Malware/Win32.Backdoor.C3543228 |
| Antiy-AVL | Trojan/Win32.Blamon |
| Arcabit | Trojan.Application.Graftor.DAAEBE |
| Avast | Win32:Malware-gen |
| Avira | DR/W32.MalwareX |
| BitDefender | Gen:Variant.Application.Graftor.700094 |
| CAT-QuickHeal | Trojan.MauvaiseRI.S5247825 |
| CTX | exe.unknown.graftor |
| ClamAV | Win.Trojan.BlackMoon-7136668-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.DownLoader30.46856 |
| ESET-NOD32 | Win32/Packed.BlackMoon.A suspicious application |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Variant.Application.Graftor.700094 (B) |
| F-Secure | Dropper.DR/W32.MalwareX |
| Fortinet | W32/CoinMiner.ESFJ!tr |
| GData | Win32.Trojan.Agent.WP |
| Detected | |
| Gridinsoft | Trojan.Win32.Wacatac.oa!s1 |
| Jiangmin | Trojan.Generic.ekiun |
| K7AntiVirus | Riskware ( 005cddda1 ) |
| K7GW | Riskware ( 005cddda1 ) |
| Kaspersky | HEUR:Trojan.Win32.Wofith.gen |
| Malwarebytes | Trojan.Downloader.FKG |
| MaxSecure | Trojan.Malware.300983.susgen |
| McAfeeD | Real Protect-LS!0EAD44799FDB |
| MicroWorld-eScan | Gen:Variant.Application.Graftor.700094 |
| Microsoft | VirTool:Win32/CeeInject!rfn |
| NANO-Antivirus | Trojan.Win32.Cycler.hdwbuu |
| Panda | Trj/Genetic.gen |
| Rising | Downloader.Agent!1.B837 (CLASSIC) |
| Sangfor | Trojan.Win32.Save.BlackMoon |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win32.Dropper.rh |
| Sophos | Troj/Equatio-BN |
| Symantec | ML.Attribute.HighConfidence |
| Tencent | Trojan.Win32.Siscos.ha |
| Trapmine | malicious.high.ml.score |
| TrellixENS | GenericRXAA-AA!0EAD44799FDB |
| TrendMicro-HouseCall | Trojan.Win32.VSX.PE04CA5 |
| VBA32 | BScope.Trojan.Miancha |
| VIPRE | Gen:Variant.Application.Graftor.700094 |
| Varist | W32/Tedy.I.gen!Eldorado |
| Webroot | W32.Trojan.Gen |
| Xcitium | TrojWare.Win32.Toga.RFS@5tc75a |
| Yandex | Trojan.GenAsa!N9OiWTKjVMM |
| Zillya | Trojan.Blamon.Win32.931 |
| ZoneAlarm | Troj/Equatio-BN |
| alibabacloud | Backdoor:Win/EquationGroup.ADFW |
| huorong | TrojanDownloader/Certutil.a |
| tehtris | Generic.Malware |