cfe902baa8761bc95dd9993c041077945f20060bab4cd764429c76470f25d82b
Classification: Malicious
cfe902baa8761bc95dd9993c041077945f20060bab4cd764429c76470f25d82b is a trojan (application/x-dosexec). Detected by 30 antivirus engines.
Detection summary
- 30 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: REDLINE STEALER (S1240)
Intrusion sets: APT37 (G0067)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Apt37 | Maltiverse | 2023-07-04 04:28:50 | 2023-07-05 20:51:11 | malicious-activity | G0067 APT37 |
| RedLineStealer | MalwareBazaar Abuse.ch | 2023-06-20 22:25:16 | 2023-06-20 22:25:16 | malicious-activity | S1240 RedLine Stealer |
Tags
aptSample information
- Filenames
- b7b007a29f6cc7068c1efbe2fdc45f31.exe
- File type
- application/x-dosexec
- MD5
b7b007a29f6cc7068c1efbe2fdc45f31- SHA-1
53aabe098c2395878cc276dd76a8fd44261a8ecb- SHA-256
cfe902baa8761bc95dd9993c041077945f20060bab4cd764429c76470f25d82b- First indexed
- 2023-06-20 23:19:39
- Last updated
- 2026-09-18 06:31:53
Antivirus detections
| Engine | Detection |
|---|---|
| Bkav | W32.AIDetectMalware |
| Cynet | Malicious (score: 100) |
| Malwarebytes | Trojan.MalPack.GS |
| Sangfor | Trojan.Win32.Save.a |
| Cybereason | malicious.98c239 |
| Cyren | W32/Kryptik.KAO.gen!Eldorado |
| Symantec | ML.Attribute.HighConfidence |
| Elastic | malicious (high confidence) |
| APEX | Malicious |
| ClamAV | Win.Packer.pkr_ce1a-9980177-0 |
| Kaspersky | UDS:DangerousObject.Multi.Generic |
| Avast | PWSX-gen [Trj] |
| McAfee-GW-Edition | BehavesLike.Win32.Lockbit.fc |
| FireEye | Generic.mg.b7b007a29f6cc706 |
| Sophos | Troj/Krypt-VZ |
| SentinelOne | Static AI - Suspicious PE |
| Microsoft | Trojan:Win32/Wacatac.B!ml |
| Gridinsoft | Ransom.Win32.STOP.dg!n |
| Detected | |
| Acronis | suspicious |
| McAfee | Artemis!B7B007A29F6C |
| VBA32 | Trojan.Buzus |
| Cylance | unsafe |
| Rising | [email protected] (RDML:7MwSDSnN+saAiMJQkdyIgA) |
| Ikarus | Trojan.Win32.Ranumbot |
| MaxSecure | Trojan.Malware.300983.susgen |
| Fortinet | W32/GenKryptik.ERHN!tr |
| AVG | PWSX-gen [Trj] |
| DeepInstinct | MALICIOUS |
| CrowdStrike | win/malicious_confidence_100% (W) |