c80656fe59bdeb3e701d1f7eeaaba2ef673368b2c4947945f598e3e84a6cb7f8

Classification: Malicious

c80656fe59bdeb3e701d1f7eeaaba2ef673368b2c4947945f598e3e84a6cb7f8 is a malicious file sample. Linked to Sandworm Team activity.

Detection summary

  • 29 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: SANDWORM TEAM (G0034)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Electrum Maltiverse 2023-04-27 04:27:30 2023-04-28 14:38:31 malicious-activity G0034 Sandworm Team

Tags

apt

Sample information

SHA-256
c80656fe59bdeb3e701d1f7eeaaba2ef673368b2c4947945f598e3e84a6cb7f8
First indexed
2023-04-28 14:38:31
Last updated
2023-04-28 14:38:31

Antivirus detections

EngineDetection
LionicTrojan.ZIP.Stealer.4!c
K7AntiVirusTrojan ( 0059df7d1 )
BitDefenderGen:Variant.Barys.382627
K7GWTrojan ( 0059df7d1 )
BaiduArchive.Bomb
SymantecTrojan.Gen.NPE
ESET-NOD32a variant of MSIL/Kryptik.AHUA
CynetMalicious (score: 70)
KasperskyHEUR:Trojan-Spy.MSIL.Stealer.gen
AlibabaTrojanSpy:MSIL/Stealer.1f5bc412
MicroWorld-eScanGen:Variant.Barys.382627
TencentMsil.Trojan-Spy.Stealer.Czlw
EmsisoftGen:Variant.Barys.382627 (B)
F-SecureTrojan.TR/Crypt.OPACK.Gen
VIPREGen:Variant.Barys.382627
McAfee-GW-EditionArtemis
FireEyeGen:Variant.Barys.382627
SophosMal/MSIL-VD
AviraHEUR/Pumpar.Gen
MicrosoftTrojan:MSIL/AgentTesla!MSR
ArcabitTrojan.Barys.D5D6A3
ViRobotTrojan.Win.S.Agent.688283232
ZoneAlarmHEUR:Trojan-Spy.MSIL.Stealer.gen
GDataGen:Variant.Barys.382627
Acronissuspicious
RisingMalware.SwollenFile!1.E38A (CLASSIC)
MAXmalware (ai score=84)
MaxSecureTrojan.Malware.73709669.susgen
PandaTrj/GdSda.A