c25e5e87d1e665197209e7aaec64e484ce30e2dabcc9e457c5593ac6c7bb5686
Classification: Malicious
c25e5e87d1e665197209e7aaec64e484ce30e2dabcc9e457c5593ac6c7bb5686 is a malicious file sample. Linked to Rokrat malware. Detected by 38 antivirus engines.
Detection summary
- 38 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: ROKRAT (S0240)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| ROKRAT | MalwarePatrol | 2026-03-03 18:32:24 | 2026-03-03 18:32:24 | malicious-activity | S0240 ROKRAT |
Tags
rokratSample information
- SHA-256
c25e5e87d1e665197209e7aaec64e484ce30e2dabcc9e457c5593ac6c7bb5686- First indexed
- 2026-03-03 18:32:24
- Last updated
- 2026-06-17 04:06:19
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.Agent.LNK.Gen |
| AVG | LNK:Agent-HN [Trj] |
| AhnLab-V3 | Dropper/LNK.Generic.S2343 |
| Arcabit | CMD:Heur.BZC.YAX.Pantera.190.35251E58 |
| Avast | LNK:Agent-HN [Trj] |
| Avira | LNK/Susp.Gen |
| BitDefender | CMD:Heur.BZC.YAX.Pantera.190.35251E58 |
| Bkav | LNK.ScriptQH.Trojan |
| CTX | lnk.trojan.pantera |
| Cynet | Malicious (score: 99) |
| DrWeb | PowerShell.Inject.158 |
| ESET-NOD32 | LNK/TrojanDropper.Agent.DV trojan |
| Emsisoft | CMD:Heur.BZC.YAX.Pantera.190.35251E58 (B) |
| F-Secure | Malware.LNK/Susp.Gen |
| Fortinet | LNK/Agent.HV!tr |
| GData | CMD:Heur.BZC.YAX.Pantera.190.35251E58 |
| Detected | |
| Kaspersky | HEUR:Trojan.WinLNK.Powecod.c |
| Lionic | Trojan.WinLNK.Pantera.4!c |
| McAfeeD | Trojan:Shortcut/GenericY.IZ |
| Microsoft | Trojan:Win32/ROKRATLNK.DB!MTB |
| NANO-Antivirus | Trojan.Script.Dropper.lcqwng |
| Rising | Trojan.Agent/LNK!1.AA03 (CLASSIC) |
| Skyhigh | BehavesLike.Dropper.rx |
| Sophos | Troj/LnkDrop-M |
| Symantec | Scr.Mallnk!gen13 |
| Tencent | Win32.Trojan.Powecod.Wylw |
| TrellixENS | LNK/Agent!E4DDD5CC8B5F |
| TrendMicro | Trojan.LNK.DROPPER.C |
| TrendMicro-HouseCall | Trojan.LNK.DROPPER.C |
| VBA32 | Trojan.Link.DoubleRun |
| VIPRE | CMD:Heur.BZC.YAX.Pantera.190.35251E58 |
| Varist | LNK/ABTrojan.PSJM- |
| ViRobot | LNK.S.Agent.41951597 |
| Zillya | Dropper.Agent.Script.500 |
| ZoneAlarm | Troj/LnkDrop-M |
| alibabacloud | Trojan[dropper]:Win/ROKRATLNK.DK8PHU |
| huorong | TrojanDownloader/LNK.Starter.a |