1.exe

Classification: Malicious

1.exe is a malicious file sample. Reported by 2 threat sources, last seen 2023-09-13. Detected by 52 antivirus engines.

Detection summary

  • 52 antivirus detections (45% detection ratio)
  • 0 IDS alerts
  • 2 processes observed
  • 1 contacted hosts
  • 0 DNS requests

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2023-09-13 15:00:03 2023-09-13 15:00:03
RecordBreaker MalwareBazaar Abuse.ch 2023-09-13 08:25:43 2023-09-13 08:25:43 malicious-activity

Sample information

Filenames
1.exe
File type
PE32 executable (GUI) Intel 80386 Mono/.Net assemb ...
Size
2571440 bytes
MD5
e8eedfa9c23d565850e4b712c469dc96
SHA-1
f2f601bc5c5ac13d007774d7a874f06d41360898
SHA-256
b5c09b721948af6cdc6ae9a4dc3777d51902ff8e8b1b96bae838bcd96d3de3c1
First indexed
2023-09-13 10:19:20
Last updated
2026-09-03 00:07:38

Antivirus detections

EngineDetection
ALYacGen:Variant.Lazy.391484
AVGWin32:CrypterX-gen [Trj]
AhnLab-V3Trojan/Win.PWSX-gen.C5485327
AlibabaTrojanPSW:MSIL/Stealer.f6a2da92
Antiy-AVLTrojan/MSIL.Kryptik
ArcabitTrojan.Lazy.D5F93C
AvastWin32:CrypterX-gen [Trj]
AviraHEUR/AGEN.1372970
BitDefenderGen:Variant.Lazy.391484
BkavW32.AIDetectMalware.CS
CAT-QuickHealTrojan.Ghanarava.172139806469dc96
CTXexe.trojan.msil
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
DeepInstinctMALICIOUS
ESET-NOD32a variant of MSIL/GenKryptik.GOQJ
Elasticmalicious (high confidence)
EmsisoftGen:Variant.Lazy.391484 (B)
F-SecureHeuristic.HEUR/AGEN.1372970
FireEyeGen:Variant.Lazy.391484
FortinetMSIL/Kryptik.AJGW!tr
GDataGen:Variant.Lazy.391484
GoogleDetected
IkarusTrojan.MSIL.Crypt
K7AntiVirusTrojan ( 005a96af1 )
K7GWTrojan ( 005a96af1 )
KasperskyHEUR:Trojan-PSW.MSIL.Stealer.gen
KingsoftWin32.Troj.Unknown.a
LionicTrojan.Win32.Stealer.12!c
MalwarebytesMalware.AI.2960394613
MaxSecureTrojan.Malware.74396735.susgen
McAfeeArtemis!E8EEDFA9C23D
McAfeeDti!B5C09B721948
MicroWorld-eScanGen:Variant.Lazy.391484
MicrosoftTrojan:MSIL/LummaStealer.C!MTB
NANO-AntivirusTrojan.Win32.Stealer.kaohhe
Paloaltogeneric.ml
PandaTrj/Chgt.AD
RisingMalware.Obfus/[email protected] (RDM.MSIL2:A7OU3qKyVuJEqKodCfttTQ)
SangforInfostealer.Msil.Kryptik.V86c
SentinelOneStatic AI - Malicious PE
SophosMal/Generic-S
SymantecML.Attribute.HighConfidence
TencentMalware.Win32.Gencirc.13ef34f2
VBA32TScope.Trojan.MSIL
VIPREGen:Variant.Lazy.391484
VaristW32/MSIL_Kryptik.JZO.gen!Eldorado
VirITTrojan.Win32.Genus.TCI
XcitiumMalware@#rgyclhnhpht6
ZillyaTrojan.GenKryptik.Win32.425946
alibabacloudTrojan[stealer]:MSIL/Kryptik.AJGW
huorongTrojanSpy/MSIL.Stealer.dd

Network contacts

5.78.81.39

Process list

NameCommand line
1.exe
MsBuild.exe