c2c5560cede5fe447363e0d432707fc287312c20e92715b59700888e77eab92d
Classification: Malicious
c2c5560cede5fe447363e0d432707fc287312c20e92715b59700888e77eab92d is a trojan (Windows executable). Detected by 48 antivirus engines. Linked to Apt37 activity.
Detection summary
- 48 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Intrusion sets: APT37 (G0067)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Apt37 | Maltiverse | 2023-07-04 04:28:50 | 2023-07-05 20:51:10 | malicious-activity | G0067 APT37 |
| Spyware | VM-Ray | 2023-06-07 03:22:00 | 2023-06-07 03:22:00 | ||
| ArkeiStealer | MalwareBazaar Abuse.ch | 2023-06-07 01:30:40 | 2023-06-07 01:30:40 | malicious-activity |
Tags
aptSample information
- Filenames
- file.exe, c2c5560cede5fe447363e0d432707fc287312c20e92715b59700888e77eab92d.exe
- File type
- PE32 executable (GUI) Intel 80386, for MS Windows
- MD5
f76b7a03bc4db7e669adc6a0eb80322a- SHA-1
ad3ef2ea2dcf95e805c7be56a7d63f654328121e- SHA-256
c2c5560cede5fe447363e0d432707fc287312c20e92715b59700888e77eab92d- First indexed
- 2023-06-07 02:17:49
- Last updated
- 2026-09-27 13:32:49
Antivirus detections
| Engine | Detection |
|---|---|
| Bkav | W32.AIDetectMalware |
| Lionic | Trojan.Win32.Convagent.4!c |
| Elastic | malicious (high confidence) |
| MicroWorld-eScan | Gen:Variant.Ser.Zusy.4331 |
| FireEye | Generic.mg.f76b7a03bc4db7e6 |
| McAfee | Artemis!F76B7A03BC4D |
| Malwarebytes | Trojan.MalPack.GS |
| Sangfor | Trojan.Win32.Save.a |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cyren | W32/Kryptik.JZI.gen!Eldorado |
| Symantec | ML.Attribute.HighConfidence |
| tehtris | Generic.Malware |
| ESET-NOD32 | a variant of Win32/Kryptik.HTSV |
| APEX | Malicious |
| Cynet | Malicious (score: 100) |
| Kaspersky | HEUR:Backdoor.Win32.Androm.gen |
| BitDefender | Gen:Variant.Ser.Zusy.4331 |
| ViRobot | Trojan.Win.Z.Ser.360960 |
| Avast | Win32:TrojanX-gen [Trj] |
| Emsisoft | Gen:Variant.Ser.Zusy.4331 (B) |
| DrWeb | Trojan.PWS.Stealer.36880 |
| VIPRE | Gen:Variant.Ser.Zusy.4331 |
| TrendMicro | TrojanSpy.Win32.VIDAR.YXDFGZ |
| McAfee-GW-Edition | BehavesLike.Win32.Lockbit.fc |
| Trapmine | malicious.high.ml.score |
| Sophos | Troj/Krypt-XU |
| SentinelOne | Static AI - Malicious PE |
| GData | Gen:Variant.Ser.Zusy.4331 |
| MAX | malware (ai score=80) |
| Antiy-AVL | Trojan[Backdoor]/Win32.Mokes |
| Gridinsoft | Ransom.Win32.Sabsik.ca |
| Arcabit | Trojan.Ser.Zusy.D10EB |
| ZoneAlarm | HEUR:Backdoor.Win32.Androm.gen |
| Microsoft | Trojan:Win32/Redline.CAZ!MTB |
| Detected | |
| AhnLab-V3 | Trojan/Win.Generic.R581409 |
| ALYac | Gen:Variant.Ser.Zusy.4331 |
| VBA32 | BScope.Backdoor.Tofsee |
| Cylance | unsafe |
| Panda | Trj/RansomGen.A |
| TrendMicro-HouseCall | TROJ_GEN.R002H0CF623 |
| Rising | [email protected] (RDML:We/JyM26x02ulyLNYWaVJg) |
| Ikarus | Trojan-Spy.Agent |
| MaxSecure | Trojan.Malware.300983.susgen |
| Fortinet | W32/Kryptik.HTSV!tr |
| AVG | Win32:TrojanX-gen [Trj] |
| Cybereason | malicious.a2dcf9 |
| DeepInstinct | MALICIOUS |