cf72f38825f1944622221977fba535adcdc831173101c287ae912493e9d1afe2
Classification: Malicious
cf72f38825f1944622221977fba535adcdc831173101c287ae912493e9d1afe2 is a trojan (application/x-dosexec). Detected by 40 antivirus engines.
Detection summary
- 40 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: RACCOON STEALER (S1148)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| RaccoonStealer | Abuse.ch | 2021-05-28 15:20:16 | 2021-05-28 15:20:16 | malicious-activity | S1148 Raccoon Stealer |
Sample information
- Filenames
- 89d31b066449c3104fdc21ccb37eb863.exe
- File type
- application/x-dosexec
- MD5
89d31b066449c3104fdc21ccb37eb863- SHA-1
385b878eb272b7d92464efb5ba8e3fd0920b5597- SHA-256
cf72f38825f1944622221977fba535adcdc831173101c287ae912493e9d1afe2- First indexed
- 2021-05-28 17:15:08
- Last updated
- 2026-10-09 01:58:37
Antivirus detections
| Engine | Detection |
|---|---|
| Bkav | W32.AIDetect.malware1 |
| Elastic | malicious (high confidence) |
| MicroWorld-eScan | Trojan.GenericKD.46371565 |
| FireEye | Generic.mg.89d31b066449c310 |
| McAfee | RDN/Generic.dx |
| Cylance | Unsafe |
| Sangfor | Trojan.Win32.Save.a |
| K7AntiVirus | Riskware ( 0040eff71 ) |
| K7GW | Riskware ( 0040eff71 ) |
| Cybereason | malicious.eb272b |
| Arcabit | Trojan.Generic.D2C392ED |
| Cyren | W32/Kryptik.EED.gen!Eldorado |
| Symantec | ML.Attribute.HighConfidence |
| ESET-NOD32 | a variant of Win32/Kryptik.HLBX |
| APEX | Malicious |
| Avast | Win32:PWSX-gen [Trj] |
| Kaspersky | HEUR:Trojan-Ransom.Win32.Stop.gen |
| BitDefender | Trojan.GenericKD.46371565 |
| Paloalto | generic.ml |
| Ad-Aware | Trojan.GenericKD.46371565 |
| Sophos | ML/PE-A |
| McAfee-GW-Edition | BehavesLike.Win32.Emotet.hc |
| Emsisoft | Trojan.GenericKD.46371565 (B) |
| SentinelOne | Static AI - Suspicious PE |
| Gridinsoft | Trojan.Win32.Packed.oa |
| Microsoft | Trojan:Win32/Glupteba.QE!MTB |
| AegisLab | Trojan.Win32.Malicious.4!c |
| GData | Trojan.GenericKD.46371565 |
| Cynet | Malicious (score: 100) |
| AhnLab-V3 | Infostealer/Win.SmokeLoader.R422951 |
| Acronis | suspicious |
| BitDefenderTheta | Gen:NN.ZexaF.34692.IqW@aigAMKhG |
| Malwarebytes | Trojan.MalPack.GS |
| Rising | Trojan.Kryptik!1.D63F (CLASSIC) |
| Ikarus | Trojan.Win32.Crypt |
| eGambit | Unsafe.AI_Score_98% |
| Fortinet | PossibleThreat.PALLAS.H |
| MaxSecure | Trojan.Malware.300983.susgen |
| AVG | Win32:PWSX-gen [Trj] |
| CrowdStrike | win/malicious_confidence_100% (W) |