e24b29a1df287fe947018c33590a0b443d6967944b281b70fba7ea6556d00109
Classification: Malicious
e24b29a1df287fe947018c33590a0b443d6967944b281b70fba7ea6556d00109 is a trojan. Detected by 69 antivirus engines. Linked to Threat Group-3390 activity.
Detection summary
- 69 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Intrusion sets: THREAT GROUP-3390 (G0027)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Emissary Panda | Maltiverse | 2023-03-02 04:16:33 | 2023-03-03 14:34:09 | malicious-activity | G0027 Threat Group-3390 |
Tags
aptSample information
- SHA-256
e24b29a1df287fe947018c33590a0b443d6967944b281b70fba7ea6556d00109- First indexed
- 2023-03-03 14:34:09
- Last updated
- 2026-08-23 02:44:45
Antivirus detections
| Engine | Detection |
|---|---|
| Bkav | W32.AIDetectNet.01 |
| Lionic | Trojan.Win32.Agensla.4!c |
| Elastic | malicious (high confidence) |
| MicroWorld-eScan | Trojan.GenericKD.65191031 |
| ALYac | Trojan.GenericKD.65191031 |
| Cylance | unsafe |
| Zillya | Trojan.Agensla.Win32.22798 |
| Sangfor | Infostealer.Msil.AgentTesla.Vf67 |
| K7AntiVirus | Trojan ( 0059e3e81 ) |
| Alibaba | TrojanPSW:MSIL/AgentTesla.df1fd2f1 |
| K7GW | Trojan ( 0059e3e81 ) |
| Arcabit | Trojan.Generic.D3E2BC77 |
| BitDefenderTheta | Gen:NN.ZemsilCO.36308.Jn3@aqPr3ul |
| VirIT | Trojan.Win32.MSIL_Heur.A |
| Cyren | W32/ABRisk.JLHW-5872 |
| Symantec | Trojan Horse |
| ESET-NOD32 | a variant of MSIL/Kryptik.AHWV |
| APEX | Malicious |
| Paloalto | generic.ml |
| Kaspersky | HEUR:Trojan-PSW.MSIL.Agensla.gen |
| BitDefender | Trojan.GenericKD.65191031 |
| NANO-Antivirus | Trojan.Win32.RedLineSteal.juoqia |
| Avast | Win32:PWSX-gen [Trj] |
| Rising | Malware.Obfus/[email protected] (RDM.MSIL2:AU/LEGkwiDLjysf78ayskQ) |
| Emsisoft | Trojan.GenericKD.65191031 (B) |
| F-Secure | Trojan.TR/AD.RedLineSteal.ertyb |
| DrWeb | Trojan.Siggen19.33595 |
| VIPRE | Trojan.GenericKD.65191031 |
| TrendMicro | TrojanSpy.Win32.REDLINE.YXDA1Z |
| Trapmine | malicious.high.ml.score |
| FireEye | Generic.mg.9f239034add288ae |
| Sophos | Mal/Generic-S |
| Ikarus | Trojan-Spy.AgentTesla |
| Jiangmin | Trojan.PSW.MSIL.elot |
| Detected | |
| Avira | TR/AD.RedLineSteal.ertyb |
| MAX | malware (ai score=88) |
| Antiy-AVL | Trojan[PSW]/MSIL.Agensla |
| Microsoft | Trojan:MSIL/AgentTesla.CAE!MTB |
| ZoneAlarm | HEUR:Trojan-PSW.MSIL.Agensla.gen |
| GData | Trojan.GenericKD.65191031 |
| Cynet | Malicious (score: 100) |
| AhnLab-V3 | Trojan/Win.Injection.C5367527 |
| McAfee | Artemis!9F239034ADD2 |
| Malwarebytes | Trojan.MalPack.PNG.Generic |
| TrendMicro-HouseCall | TrojanSpy.Win32.REDLINE.YXDA1Z |
| Tencent | Msil.Trojan-QQPass.QQRob.Osmw |
| SentinelOne | Static AI - Malicious PE |
| MaxSecure | Trojan.Malware.300983.susgen |
| Fortinet | MSIL/GenKryptik.GCBX!tr |
| AVG | Win32:PWSX-gen [Trj] |
| Panda | Generic Suspicious |
| CrowdStrike | win/malicious_confidence_100% (W) |
| ALYac | Trojan.Ransom.Loki.BIK |
| Arcabit | Trojan.Ransom.Loki.BIK |
| BitDefender | Trojan.Ransom.Loki.BIK |
| BitDefenderTheta | Gen:NN.ZemsilCO.36270.Jn3@aqPr3ul |
| DeepInstinct | MALICIOUS |
| Emsisoft | Trojan.Ransom.Loki.BIK (B) |
| GData | Trojan.Ransom.Loki.BIK |
| Malwarebytes | Generic.Malware.AI.DDS |
| McAfee | GenericRXVH-KM!9F239034ADD2 |
| McAfee-GW-Edition | BehavesLike.Win32.Generic.tt |
| MicroWorld-eScan | Trojan.Ransom.Loki.BIK |
| Sangfor | Suspicious.Win32.Save.a |
| Sophos | ML/PE-A |
| TrendMicro | TROJ_GEN.R002C0DFI23 |
| TrendMicro-HouseCall | TROJ_GEN.R002C0DFI23 |
| VIPRE | Trojan.Ransom.Loki.BIK |