jivarthr edis.exe

Classification: Malicious

jivarthr edis.exe is a malicious file sample. Linked to Crimson malware. Reported by 1 threat source, last seen 2025-02-16. Detected by 50 antivirus engines.

Detection summary

  • 50 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: CRIMSON (S0115)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
CrimsonRAT MalwareBazaar Abuse.ch 2025-02-16 20:19:16 2025-02-16 20:19:16 malicious-activity S0115 Crimson

Sample information

Filenames
jivarthr edis.exe
File type
application/x-dosexec
MD5
61bc43314cbcba044f3d0b7ffcf082d6
SHA-1
375cf507cb0dbb7ff50d04369647738ba61ced95
SHA-256
db2328a4c6f74c29670d87f90fc23fe46559b9d6f64e3ad685acb7a538835bad
First indexed
2025-02-16 21:24:17
Last updated
2025-02-16 21:24:17

Antivirus detections

EngineDetection
ALYacTrojan.GenericKD.75821644
AVGWin32:MalwareX-gen [Trj]
AlibabaBackdoor:MSIL/CrimsonRat.59ac864b
Antiy-AVLTrojan/MSIL.Agent
ArcabitTrojan.Generic.D484F24C
AvastWin32:MalwareX-gen [Trj]
AviraTR/Agent.kajhf
BitDefenderTrojan.GenericKD.75821644
BkavW32.AIDetectMalware.CS
CAT-QuickHealBackdoor.MSIL
CTXexe.trojan.msil
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
DeepInstinctMALICIOUS
DrWebBackDoor.CrimsonNET.14
ESET-NOD32a variant of MSIL/Agent.BNY
Elasticmalicious (high confidence)
EmsisoftTrojan.GenericKD.75821644 (B)
F-SecureTrojan.TR/Agent.kajhf
FireEyeGeneric.mg.61bc43314cbcba04
FortinetMSIL/Agent.BNY!tr
GDataTrojan.GenericKD.75821644
GoogleDetected
GridinsoftTrojan.Win32.Agent.sa
IkarusTrojan.MSIL.Agent
K7AntiVirusTrojan ( 0053965f1 )
K7GWTrojan ( 0053965f1 )
KasperskyHEUR:Backdoor.MSIL.CrimsonRat.gen
KingsoftMSIL.Backdoor.CrimsonRat.gen
LionicTrojan.Win32.CrimsonRat.m!c
MalwarebytesMalware.AI.4283621955
MaxSecureTrojan.Malware.7164915.susgen
McAfeeArtemis!61BC43314CBC
McAfeeDReal Protect-LS!61BC43314CBC
MicroWorld-eScanTrojan.GenericKD.75821644
MicrosoftTrojan:Win32/Wacatac.B!ml
Paloaltogeneric.ml
PandaTrj/Chgt.AD
RisingBackdoor.Crimson!1.EA63 (CLASSIC)
SangforSuspicious.Win32.Save.a
SentinelOneStatic AI - Malicious PE
SkyhighArtemis!Trojan
SophosMal/Generic-S
SymantecML.Attribute.HighConfidence
TencentMalware.Win32.Gencirc.1431da25
VBA32Backdoor.MSIL.Crimson.Heur
VIPRETrojan.GenericKD.75821644
VaristW32/ABTrojan.YHUJ-9326
alibabacloudBackdoor:MSIL/Wacapew.C9nj
huorongBackdoor/MSIL.CrimsonRat.b