ÐÑполниÑелÑнÑй лиÑÑ â13408724-25.scr
Classification: Malicious
ÐÑполниÑелÑнÑй лиÑÑ â13408724-25.scr is a trojan (application/x-dosexec). Detected by 48 antivirus engines.
Detection summary
- 48 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: DARKWATCHMAN (S0673) CATCHAMAS (S0261)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Catchamas | ThreatFox Abuse.ch | 2025-09-26 23:29:46 | 2025-09-28 23:18:26 | S0261 Catchamas | |
| DarkWatchman | MalwareBazaar Abuse.ch | 2025-09-26 16:59:08 | 2025-09-26 16:59:08 | malicious-activity | S0673 DarkWatchman |
Tags
win.catchamasSample information
- Filenames
- ÐÑполниÑелÑнÑй лиÑÑ â13408724-25.scr
- File type
- application/x-dosexec
- MD5
37db8c3cb65ff828a913a7241870f866- SHA-1
f25d995fb0e31f74f981b049229600e3df92f92c- SHA-256
c905f0495ede4de681a29cf21a8915df1bb844328924b3c2c207630d7e33067b- First indexed
- 2025-09-26 17:20:37
- Last updated
- 2026-08-18 08:36:41
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Application.Generic.4221953 |
| AVG | Win32:MalwareX-gen [Pws] |
| AhnLab-V3 | Trojan/Win.NEGASTEAL.C5800867 |
| Alibaba | Trojan:MSIL/Taskun.bd5ee321 |
| Arcabit | Application.Generic.D406C01 |
| Avast | Win32:MalwareX-gen [Pws] |
| Avira | TR/Kryptik.zczwc |
| BitDefender | Application.Generic.4221953 |
| Bkav | W32.AIDetectMalware.CS |
| CTX | exe.trojan.msil |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Siggen31.58115 |
| ESET-NOD32 | a variant of MSIL/Kryptik.AOKQ |
| Elastic | malicious (moderate confidence) |
| Emsisoft | Application.Generic.4221953 (B) |
| F-Secure | Trojan.TR/Kryptik.zczwc |
| Fortinet | MSIL/Formbook.AA!tr |
| GData | Application.Generic.4221953 |
| Detected | |
| Gridinsoft | Trojan.Win32.Kryptik.sa |
| Ikarus | Trojan.MSIL.Inject |
| K7AntiVirus | Trojan ( 005ce1571 ) |
| K7GW | Trojan ( 005ce1571 ) |
| Kaspersky | HEUR:Trojan.MSIL.Taskun.gen |
| Kingsoft | Win32.Troj.Unknown.a |
| Lionic | Trojan.Win32.Taskun.4!c |
| Malwarebytes | Trojan.MalPack.PNG.Generic |
| MaxSecure | Trojan.Malware.300983.susgen |
| McAfeeD | ti!C905F0495EDE |
| MicroWorld-eScan | Application.Generic.4221953 |
| Microsoft | Trojan:MSIL/SpyNoon.ZPN!MTB |
| Paloalto | generic.ml |
| Panda | Trj/GdSda.A |
| Rising | Malware.Obfus/[email protected] (RDM.MSIL2:mpb6GrcRrXvGBYuhfKx7kw) |
| Sangfor | Trojan.Msil.Kryptik.Vqgd |
| Skyhigh | Artemis!Trojan |
| Sophos | Troj/Krypt-AQM |
| Symantec | Trojan Horse |
| Tencent | Win32.Trojan.FalseSign.Dzlw |
| TrellixENS | Artemis!37DB8C3CB65F |
| TrendMicro-HouseCall | TROJ_GEN.R002H01IQ25 |
| VIPRE | Trojan.GenericKD.77412188 |
| Varist | W32/MSIL_Agent.JXW.gen!Eldorado |
| Yandex | Trojan.Igent.b5bt7O.4 |
| ZoneAlarm | Troj/Krypt-AQM |
| alibabacloud | Software:MSIL/Wacatac.B9nj |