c78767cb268589c7e3519f8643c7d7bc891ee3e8f8660f9340419af278ade263.exe

Classification: Malicious

c78767cb268589c7e3519f8643c7d7bc891ee3e8f8660f9340419af278ade263.exe is a malicious file sample. Linked to Sandworm Team, Earth Lusca activity.

Detection summary

  • 77 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: SANDWORM TEAM (G0034) EARTH LUSCA (G1006)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Electrum Maltiverse 2023-03-02 04:15:22 2023-03-03 14:34:14 malicious-activity G0034 Sandworm Team
Earth Lusca Maltiverse 2023-03-02 04:15:22 2023-03-03 14:34:11 malicious-activity G1006 Earth Lusca
Spyware VM-Ray 2022-12-04 21:26:16 2022-12-04 21:26:16

Tags

apt

Sample information

Filenames
c78767cb268589c7e3519f8643c7d7bc891ee3e8f8660f9340419af278ade263.exe
File type
PE32 executable (GUI) Intel 80386, for MS Windows
SHA-256
c78767cb268589c7e3519f8643c7d7bc891ee3e8f8660f9340419af278ade263
First indexed
2022-12-04 21:12:01
Last updated
2025-07-12 19:25:01

Antivirus detections

EngineDetection
BkavW32.AIDetectNet.01
LionicTrojan.Win32.Stealer.12!c
Elasticmalicious (high confidence)
CAT-QuickHealTrojan.Generic.TRFH518
ALYacTrojan.Stealer.Titan
CylanceUnsafe
VIPREGen:Variant.Barys.55731
SangforSuspicious.Win32.Save.a
K7AntiVirusRiskware ( 0040eff71 )
AlibabaTrojan:Win32/Kryptik.ali2000016
K7GWRiskware ( 0040eff71 )
Cybereasonmalicious.7aa5e4
CyrenW32/ABRisk.GAYM-0737
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of MSIL/Kryptik.RZS
APEXMalicious
Paloaltogeneric.ml
CynetMalicious (score: 100)
KasperskyHEUR:Trojan-Spy.MSIL.Stealer.gen
BitDefenderGen:Variant.Barys.55731
NANO-AntivirusTrojan.Win32.Stealer.jtrdfw
ViRobotTrojan.Win32.S.Agent.2456064
MicroWorld-eScanGen:Variant.Barys.55731
AvastWin32:PWSX-gen [Trj]
TencentMsil.Trojan-Spy.Stealer.Bzlw
EmsisoftGen:Variant.Barys.55731 (B)
F-SecureTrojan.TR/Dropper.MSIL.Gen
DrWebTrojan.PWS.Siggen3.25668
ZillyaTrojan.Kryptik.Win32.3972608
TrendMicroTROJ_GEN.R002C0DL522
McAfee-GW-EditionBehavesLike.Win32.Generic.vc
Trapminesuspicious.low.ml.score
FireEyeGeneric.mg.b0604627aa5e4713
SophosMal/Generic-S
SentinelOneStatic AI - Malicious PE
JiangminTrojanSpy.MSIL.bjiu
WebrootW32.Trojan.Gen
AviraTR/Dropper.MSIL.Gen
Antiy-AVLTrojan/MSIL.Kryptik
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:MSIL/Redline.NEL!MTB
ArcabitTrojan.Barys.DD9B3
ZoneAlarmHEUR:Trojan-Spy.MSIL.Stealer.gen
GDataGen:Variant.Barys.55731
GoogleDetected
AhnLab-V3Trojan/Win.Generic.C5218829
Acronissuspicious
McAfeeArtemis!B0604627AA5E
MAXmalware (ai score=100)
MalwarebytesTrojan.Injector
TrendMicro-HouseCallTROJ_GEN.R002C0DL522
RisingMalware.Obfus/[email protected] (RDM.MSIL2:5NSDtpA2mnI6c0n8bMDHPA)
YandexTrojan.Kryptik!KAtF58z8lss
IkarusTrojan.MSIL.Crypt
MaxSecureTrojan.Malware.73709669.susgen
FortinetMSIL/Kryptik.RZS!tr
BitDefenderThetaGen:NN.ZemsilF.36276.vo0@aWL4VLj
AVGWin32:PWSX-gen [Trj]
PandaTrj/GdSda.A
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojanSpy:MSIL/Redline.edef6331
ArcabitTrojan.Marsilia.D7C1
BitDefenderGen:Variant.Marsilia.1985
BitDefenderThetaGen:NN.ZemsilF.36744.vo0@aWL4VLj
BkavW32.AIDetectMalware.CS
Cybereasonmalicious.fbbb3c
Cylanceunsafe
DeepInstinctMALICIOUS
EmsisoftGen:Variant.Marsilia.1985 (B)
FortinetMSIL/Siggen21.59560!tr
GDataGen:Variant.Marsilia.1985
KingsoftMSIL.Trojan-Spy.Stealer.gen
MicroWorld-eScanGen:Variant.Marsilia.1985
SkyhighBehavesLike.Win32.Generic.vc
SymantecTrojan Horse
VIPREGen:Variant.Marsilia.1985
VirITTrojan.Win32.MSIL_Heur.A