Scan0004.exe
Classification: Malicious
Scan0004.exe is a malicious file sample (Windows executable). Linked to Remcos, Crossrat malware. Reported by 4 threat sources, last seen 2026-07-04.
Detection summary
- 0 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 1 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: REMCOS (S0332) CROSSRAT (S0235)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| CrossRAT | ThreatFox Abuse.ch | 2026-07-04 00:43:58 | 2026-07-04 01:25:06 | S0235 CrossRAT | |
| Remcos | Triage | 2026-07-03 08:15:55 | 2026-07-03 08:15:55 | malicious-activity | S0332 Remcos |
| RemcosRAT | MalwareBazaar Abuse.ch | 2026-07-03 08:15:13 | 2026-07-03 08:15:13 | malicious-activity | S0332 Remcos |
| Generic Malware | Hybrid-Analysis | 2026-07-03 05:45:05 | 2026-07-03 05:45:05 | malicious-activity |
Tags
infostealer remcos newminer collection discovery evasion execution persistence rat spyware stealer trojan jar.crossrat truptoSample information
- Filenames
- Scan0004.exe
- File type
- PE32 executable for MS Windows 6.00 (GUI), Intel i ...
- MD5
94e7502ee1d0fb12fa17acaa5588edb5- SHA-1
8591a11d052e3f71a45c6a35aabd51f53e3d6358- SHA-256
bb9a5f5fe0d086e592ea23909cb1aa8baf792990c90691016da16908d01e83a4- First indexed
- 2026-07-03 04:46:47
- Last updated
- 2026-10-10 08:14:54