df5dfb2bd88b1e44ea496d6f948271524efa9cef99285eeb9840b02d81bcaeb1.exe

Classification: Malicious

df5dfb2bd88b1e44ea496d6f948271524efa9cef99285eeb9840b02d81bcaeb1.exe is a malicious file sample. Reported by 2 threat sources, last seen 2025-04-23.

Detection summary

  • 78 antivirus detections
  • 1 IDS alerts
  • 1 processes observed
  • 2 contacted hosts
  • 1 DNS requests

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2025-04-23 08:45:06 2025-04-23 09:15:27
Generic.Malware MalwareBazaar Abuse.ch 2023-10-23 23:25:47 2023-10-23 23:25:47 malicious-activity

Sample information

Filenames
df5dfb2bd88b1e44ea496d6f948271524efa9cef99285eeb9840b02d81bcaeb1.exe, ryyy.exe
File type
application/x-dosexec
Size
64512 bytes
MD5
cb621e1daa5f7f43aa0f89d7b602b047
SHA-1
1edec40d7c07a8642839db8d5c42ed2a9a6019ec
SHA-256
df5dfb2bd88b1e44ea496d6f948271524efa9cef99285eeb9840b02d81bcaeb1
First indexed
2023-10-24 00:18:39
Last updated
2026-09-03 00:21:07

Antivirus detections

EngineDetection
LionicTrojan.Win32.Generic.4!c
tehtrisGeneric.Malware
SkyhighArtemis!Trojan
McAfeeArtemis!CB621E1DAA5F
MalwarebytesTrojan.Downloader.MSIL.Generic
SangforTrojan.Win32.Agent.Vxou
CrowdStrikewin/malicious_confidence_90% (W)
VirITTrojan.Win32.Injector.DUJ
SymantecML.Attribute.HighConfidence
Elasticmalicious (high confidence)
ESET-NOD32a variant of MSIL/GenKryptik.GPJJ
APEXMalicious
KasperskyHEUR:Trojan-PSW.MSIL.Agensla.gen
AvastWin32:DropperX-gen [Drp]
TencentMsil.Trojan-QQPass.QQRob.Kmnw
SophosMal/Generic-S
F-SecureHeuristic.HEUR/AGEN.1323343
DrWebTrojan.DownLoader46.25799
Trapminesuspicious.low.ml.score
IkarusTrojan.MSIL.Inject
WebrootW32.Trojan.Gen
GoogleDetected
AviraHEUR/AGEN.1323343
VaristW32/MSIL_Agent.GIL.gen!Eldorado
Antiy-AVLTrojan/Script.Phonzy
ZoneAlarmHEUR:Trojan-PSW.MSIL.Agensla.gen
MicrosoftTrojan:Win32/Leonem
CynetMalicious (score: 100)
BitDefenderThetaGen:NN.ZemsilF.36792.dm0@auaMR1m
TrendMicro-HouseCallTROJ_GEN.F0D1C00JN23
YandexTrojan.Igent.b04XQv.11
SentinelOneStatic AI - Malicious PE
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/GenKryptik.GPJJ!tr
AVGWin32:DropperX-gen [Drp]
DeepInstinctMALICIOUS
ALYacGen:Variant.Marsilia.80778
AVGWin32:MalwareX-gen [Drp]
AhnLab-V3Trojan/Win.Generic.C5527600
AlibabaTrojanPSW:MSIL/Agensla.1f28f7b1
Antiy-AVLTrojan/MSIL.GenKryptik
ArcabitTrojan.Marsilia.D13B8A
AvastWin32:MalwareX-gen [Drp]
BitDefenderGen:Variant.Marsilia.80778
BkavW32.AIDetectMalware.CS
CTXexe.trojan.msil
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
ESET-NOD32MSIL/GenKryptik.GPJJ trojan
EmsisoftGen:Variant.Marsilia.80778 (B)
FortinetMSIL/GenKryptik.GPJK!tr
GDataGen:Variant.Marsilia.80778
IkarusTrojan-Spy.MSIL.Agent
K7AntiVirusTrojan ( 005f448f1 )
K7GWTrojan ( 005f448f1 )
KingsoftMSIL.Trojan-PSW.Agensla.gen
LionicTrojan.Win32.Agensla.i!c
MalwarebytesGeneric.Malware/Suspicious
MaxSecureTrojan.Malware.74499699.susgen
McAfeeDTrojan:Win/Downloader.YA!4
MicroWorld-eScanGen:Variant.Marsilia.80778
MicrosoftTrojan:Win32/Znyonm
NANO-AntivirusTrojan.Win32.Agensla.kcpwqd
Paloaltogeneric.ml
PandaTrj/Chgt.AD
RisingMalware.Obfus/[email protected] (RDM.MSIL2:l62HSww97J43okLGms2YoQ)
SangforInfostealer.Msil.Kryptik.Vm43
SkyhighBehavesLike.Win32.Infected.km
TencentMalware.Win32.Gencirc.13f3418b
TrellixENSArtemis!CB621E1DAA5F
TrendMicro-HouseCallTrojan.Win32.VSX.PE04C9z
VBA32TScope.Trojan.MSIL
XcitiumMalware@#3kitvativwsa9
ZillyaTrojan.GenKryptik.Win32.533494
ZoneAlarmTroj/Steal-DSR
ZonerTrojan.Win32.164237
alibabacloudTrojan[stealer]:MSIL/Agensla.gen
huorongTrojanSpy/MSIL.Stealer.amv!crit

Network contacts

141.227.138.153 141.227.168.227

DNS requests

qu.ax

Process list

NameCommand line
df5dfb2bd88b1e44ea496d6f948271524efa9cef99285eeb9840b02d81bcaeb1.exe