e22a65ee0428846fcf535e5ceaf77afe1a7c364eed69492c975b6924022100aa

Classification: Malicious

e22a65ee0428846fcf535e5ceaf77afe1a7c364eed69492c975b6924022100aa is a trojan (Windows executable, 4.3 MB). Detected by 78 antivirus engines.

Detection summary

  • 78 antivirus detections
  • 0 IDS alerts
  • 2 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: KONNI (S0356)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2024-06-05 11:15:04 2026-09-14 05:45:05 malicious-activity
Konni MalwareBazaar Abuse.ch 2024-06-05 10:58:24 2024-06-05 10:58:24 malicious-activity S0356 KONNI

Tags

evasive

Sample information

Filenames
e22a65ee0428846fcf535e5ceaf77afe1a7c364eed69492c975b6924022100aa
File type
PE32 executable (DLL) (GUI) Intel 80386, for MS Wi ...
Size
4475904 bytes
MD5
2ef58336c6105f035fe560b77bc869fd
SHA-1
bc9ea4255f31f51c60fe2e446ec5b40dd927a1c1
SHA-256
e22a65ee0428846fcf535e5ceaf77afe1a7c364eed69492c975b6924022100aa
First indexed
2024-06-05 10:59:18
Last updated
2026-09-14 05:45:05

Antivirus detections

EngineDetection
ALYacBackdoor.Agent.status
APEXMalicious
AVGWin32:TrojanX-gen [Trj]
AhnLab-V3Infostealer/Win.Agent.C5589275
AlibabaTrojan:Win64/Konni.53c0815a
Antiy-AVLTrojan/Win64.Konni
ArcabitTrojan.Barys.D6B282
AvastWin32:TrojanX-gen [Trj]
BitDefenderGen:Variant.Barys.438914
BitDefenderThetaGen:NN.ZedlaF.36804.@B4@aGx9YEd
Cylanceunsafe
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
ESET-NOD32a variant of Win32/Agent.AFRB
Elasticmalicious (high confidence)
EmsisoftGen:Variant.Barys.438914 (B)
FireEyeGeneric.mg.2ef58336c6105f03
FortinetW32/Agent.AFRB!tr
GDataWin32.Trojan.Konni.A
GoogleDetected
GridinsoftTrojan.Heur!.02096020
IkarusTrojan.Win64.Agent
K7AntiVirusTrojan ( 005aa4511 )
K7GWTrojan ( 005aa4511 )
KasperskyTrojan.Win64.Konni.cv
LionicTrojan.Win32.Konni.4!c
MAXmalware (ai score=88)
MalwarebytesMalware.AI.4190147353
McAfeeArtemis!2EF58336C610
MicroWorld-eScanGen:Variant.Barys.438914
Paloaltogeneric.ml
PandaTrj/Chgt.AD
Rising[email protected] (RDML:r4MsQ1XLq5xXBYhOQ4uMbw)
SangforTrojan.Win32.Save.a
SkyhighBehavesLike.Win32.Generic.rc
SophosMal/Generic-S
SymantecML.Attribute.HighConfidence
TencentMalware.Win32.Gencirc.13f21096
TrendMicro-HouseCallTROJ_GEN.R002H0CE624
VIPREGen:Variant.Barys.438914
VaristW32/ABRisk.YSEA-7875
ViRobotTrojan.Win.Z.Agent.4475904
ZillyaTrojan.Agent.Win32.3890679
ZoneAlarmTrojan.Win64.Konni.cv
alibabacloudTrojan:Win/Konni.cv
AVGWin32:MalwareX-gen [Trj]
ArcabitTrojan.Fragtor.DB51C5
AvastWin32:MalwareX-gen [Trj]
AviraTR/AVI.Agent.xvevp
BitDefenderGen:Variant.Fragtor.741829
CAT-QuickHealTrojan.Ghanarava.1732590725c869fd
CTXdll.trojan.konni
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
DrWebTrojan.Packed2.46902
ESET-NOD32Win32/Agent.AFRB trojan
EmsisoftGen:Variant.Fragtor.741829 (B)
F-SecureTrojan.TR/AVI.Agent.xvevp
JiangminTrojan.Konni.ad
K7AntiVirusTrojan ( 005f0b251 )
K7GWTrojan ( 005f0b251 )
KingsoftWin32.HeurC.KVMH008.a
MaxSecureTrojan.Malware.248609977.susgen
McAfeeDti!E22A65EE0428
MicroWorld-eScanGen:Variant.Fragtor.741829
MicrosoftTrojan:Win32/CryptInject!rfn
NANO-AntivirusTrojan.Win32.Mlw.kofenh
RisingBackdoor.[APT37]Agent!1.FCEE (CLASSIC)
SentinelOneStatic AI - Malicious PE
TrellixENSArtemis!2EF58336C610
TrendMicroTROJ_FRS.0NA103F624
TrendMicro-HouseCallTROJ_FRS.0NA103F624
VBA32TScope.Malware-Cryptor.SB
VIPREGen:Variant.Fragtor.741829
XcitiumMalware@#22tswbivfei9o
YandexTrojan.Konni!JMtbdWGM0fs
alibabacloudTrojan:Win/CryptInject.Gen
huorongBackdoor/Konni.d

Process list

NameCommand line
<Ignored Process>
rundll32.exe"C:\e22a65ee0428846fcf535e5ceaf77afe1a7c364eed69492c975b6924022100aa.dll",#1