SecuriteInfo.com.Win64.MalwareX-gen.48495117
Classification: Malicious
SecuriteInfo.com.Win64.MalwareX-gen.48495117 is a malicious file sample. Linked to Frp malware. Reported by 2 threat sources, last seen 2025-08-12.
Detection summary
- 53 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: FRP (S1144)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| FireCrypt | ThreatFox Abuse.ch | 2025-08-10 03:29:55 | 2025-08-12 03:17:45 | ||
| FRP | MalwareBazaar Abuse.ch | 2025-08-09 06:16:22 | 2025-08-09 06:16:22 | malicious-activity | S1144 FRP |
Tags
win.firecryptSample information
- Filenames
- SecuriteInfo.com.Win64.MalwareX-gen.48495117
- File type
- application/x-dosexec
- MD5
7d2937742b9829856beb8320cccaa647- SHA-1
f067507f7c92c562b8478bf27b1fab957b52e9bd- SHA-256
e32a931de8c88f256f87edcd9a051fa9553d5d6156725718c24a813db2f2b330- First indexed
- 2025-08-09 07:19:12
- Last updated
- 2026-06-18 03:05:08
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Adware.GenericKD.61079704 |
| APEX | Malicious |
| AVG | Win64:MalwareX-gen [Misc] |
| AhnLab-V3 | Malware/Win.MalwareX-gen.C5787291 |
| Alibaba | Trojan:Win32/Frp.40b0 |
| Antiy-AVL | RiskWare[NetTool]/Win64.Frp |
| Arcabit | Adware.Generic.D3A40098 |
| Avast | Win64:MalwareX-gen [Misc] |
| BitDefender | Adware.GenericKD.61079704 |
| Bkav | W64.AIDetectMalware |
| CTX | exe.trojan.staser |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 99) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.MulDrop32.26775 |
| ESET-NOD32 | Generik.XHXYJD trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Adware.GenericKD.61079704 (B) |
| Fortinet | PossibleThreat.MTG.M |
| GData | Adware.GenericKD.61079704 |
| Detected | |
| Ikarus | PUA.WinGo.Frp |
| K7AntiVirus | Riskware ( 00584baa1 ) |
| K7GW | Riskware ( 00584baa1 ) |
| Kaspersky | Trojan.Win32.Staser.exva |
| Kingsoft | Win32.Troj.Unknown.a |
| Lionic | Trojan.Win32.Staser.4!c |
| Malwarebytes | Malware.AI.1009282534 |
| MaxSecure | Trojan.Malware.328690006.susgen |
| McAfeeD | ti!E32A931DE8C8 |
| MicroWorld-eScan | Adware.GenericKD.61079704 |
| Microsoft | Trojan:Win32/Wacatac.B!ml |
| Paloalto | generic.ml |
| Panda | Trj/PhxBzA.A |
| Rising | Trojan.Undefined!8.1327C (CLOUD) |
| Sangfor | HackTool.Win64.Frp.uwccg |
| SentinelOne | Static AI - Suspicious PE |
| Skyhigh | BehavesLike.Win64.Rootkit.vh |
| Sophos | Generic Reputation PUA (PUA) |
| Symantec | ML.Attribute.HighConfidence |
| Tencent | Malware.Win32.Gencirc.149ac5dc |
| Trapmine | suspicious.low.ml.score |
| TrellixENS | Artemis!7D2937742B98 |
| TrendMicro | Trojan.Win64.AMADEY.YXFHHZ |
| TrendMicro-HouseCall | Trojan.Win64.AMADEY.YXFHHZ |
| VBA32 | Trojan.Staser |
| VIPRE | Adware.GenericKD.61079704 |
| Varist | W64/ABApplication.YSHM-1881 |
| VirIT | Trojan.Win64.Agent.INI |
| Yandex | Trojan.Staser!33N1P+RTXAY |
| Zillya | Trojan.Staser.Win32.14667 |
| alibabacloud | Trojan:Win/Wacapew.C9nj |