3fb607401cf8bcf6f20e4a3f43006b6d_
Classification: Malicious
3fb607401cf8bcf6f20e4a3f43006b6d_ is a trojan (Windows executable, 5.3 MB). Flagged by 40% of antivirus engines (28 detections). Linked to Bitpaymer malware.
Detection summary
- 28 antivirus detections (40% detection ratio)
- 0 IDS alerts
- 1 processes observed
- 1 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Ransom.BITPAYMER |
Hybrid-Analysis |
2020-10-08 14:45:12 |
2020-10-08 14:45:12 |
|
S0570 BitPaymer
|
Sample information
- Filenames
- 3fb607401cf8bcf6f20e4a3f43006b6d_
- File type
- PE32 executable (console) Intel 80386, for MS Windows
- Size
- 5550080 bytes
- MD5
3fb607401cf8bcf6f20e4a3f43006b6d- SHA-1
938481ba583794b15931e61bd66047c6569a95c8- SHA-256
b862a6b9f29e6253ce9d54de79cb8abab5ff53cdbe186615356136629175d871- First indexed
- 2020-10-08 14:45:12
- Last updated
- 2026-09-09 23:19:53
Antivirus detections
| Engine | Detection |
|---|
| APEX | Malicious |
| AVG | Win32:TrojanX-gen [Trj] |
| AhnLab-V3 | Trojan/Win32.Emotet.R343304 |
| Avast | Win32:TrojanX-gen [Trj] |
| BitDefenderTheta | Gen:NN.ZexaF.34298.@F0@aOPiTWni |
| Bkav | W32.AIDetectVM.malware1 |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cybereason | malicious.a58379 |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| ESET-NOD32 | a variant of Win32/Kryptik.HGEZ |
| Elastic | malicious (high confidence) |
| FireEye | Generic.mg.3fb607401cf8bcf6 |
| GData | Win32.Trojan-Spy.Emotet.CO |
| Ikarus | Trojan.Dridex |
| Kaspersky | HEUR:Trojan.Win32.Zenpak.vho |
| Malwarebytes | Trojan.MalPack |
| McAfee | DoppelPaymer!3FB607401CF8 |
| McAfee-GW-Edition | BehavesLike.Win32.Generic.th |
| Microsoft | Trojan:Win32/CryptInject!MSR |
| Rising | [email protected] (RDML:8KiNgFYphATnhZ/nPAjo7A) |
| Sangfor | Malware |
| SentinelOne | DFI - Malicious PE |
| Symantec | ML.Attribute.HighConfidence |
| TrendMicro | Ransom.Win32.BITPAYMER.SM |
| TrendMicro-HouseCall | Ransom.Win32.BITPAYMER.SM |
| Webroot | W32.Malware.gen |
| ZoneAlarm | HEUR:Trojan.Win32.Zenpak.vho |
Process list
| Name | Command line |
|---|
| 3fb607401cf8bcf6f20e4a3f43006b6d_.exe | |