2023-08-26_fdbf9328269caf57c3b7d21094ac2c94_mafia.exe

Classification: Malicious

2023-08-26_fdbf9328269caf57c3b7d21094ac2c94_mafia.exe is a malicious file sample. Reported by 1 threat source, last seen 2023-10-02.

Detection summary

  • 64 antivirus detections (90% detection ratio)
  • 0 IDS alerts
  • 20 processes observed
  • 0 contacted hosts
  • 0 DNS requests

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2023-10-02 12:00:06 2023-10-02 12:00:06

Sample information

Filenames
2023-08-26_fdbf9328269caf57c3b7d21094ac2c94_mafia.exe
File type
PE32 executable (GUI) Intel 80386, for MS Windows
Size
499712 bytes
MD5
fdbf9328269caf57c3b7d21094ac2c94
SHA-1
15a8565fbeff248bc714cfa6f593bd76ed0d9338
SHA-256
e62823ac580a88cc3bbf5e9ceb7ae8cd66f3c36db6b3a7a1ecfcf5fff6e96dee
First indexed
2023-10-02 11:40:11
Last updated
2026-09-03 00:00:03

Antivirus detections

EngineDetection
ALYacTrojan.GenericKD.45887308
APEXMalicious
AVGWin32:Agent-AYZG [Cryp]
Acronissuspicious
AhnLab-V3Malware/Win32.Generic.C377281
AlibabaTrojan:Win32/Upatre.459
Antiy-AVLTrojan[Backdoor]/Win32.Salgorea.gen
ArcabitTrojan.Generic.D2BC2F4C
AvastWin32:Agent-AYZG [Cryp]
AviraTR/Graftor.114362.AZ
BaiduWin32.Trojan-Dropper.Agent.ab
BitDefenderTrojan.GenericKD.45887308
BitDefenderThetaGen:NN.ZexaF.36738.Eu1@aCZmjEfi
BkavW32.AIDetectMalware
CAT-QuickHealTrojan.Mauvaise.SL1
ClamAVWin.Trojan.Cuegoe-6336261-0
CrowdStrikewin/malicious_confidence_100% (W)
Cybereasonmalicious.fbeff2
Cylanceunsafe
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
DrWebTrojan.Siggen6.61639
ESET-NOD32a variant of Win32/TrojanDropper.Agent.QGO
EmsisoftTrojan.GenericKD.45887308 (B)
F-SecureTrojan.TR/Graftor.114362.AZ
FireEyeGeneric.mg.fdbf9328269caf57
FortinetW32/Upatre.0285!tr
GDataWin32.Trojan.PSE.1466AMO
GoogleDetected
GridinsoftTrojan.Win32.Agent.oa!s1
IkarusTrojan-Dropper.Win32.Agent
JiangminTrojan.Generic.hcyf
K7AntiVirusTrojan ( 0043c2cb1 )
K7GWTrojan ( 0043c2cb1 )
KasperskyHEUR:Backdoor.Win32.Salgorea.gen
Kingsoftmalware.kb.a.1000
LionicTrojan.Win32.Salgorea.trWL
MAXmalware (ai score=80)
MalwarebytesWapomi.Virus.FileInfector.DDS
MaxSecureTrojan.Malware.300983.susgen
MicroWorld-eScanTrojan.GenericKD.45887308
MicrosoftTrojanDownloader:Win32/Upatre
NANO-AntivirusTrojan.Win32.Agent.cwcyqh
PandaTrj/Genetic.gen
RisingBackdoor.[OceanLotus]Salgorea!1.C3DC (CLASSIC)
SUPERAntiSpywareTrojan.Agent/Gen-Dropper
SangforTrojan.Win32.Save.a
SentinelOneStatic AI - Malicious PE
SkyhighBehavesLike.Win32.Generic.gc
SophosMal/Horst-E
SymantecSMG.Heur!gen
TACHYONTrojan/W32.Salgorea.499712
TencentTrojan.Win32.Salgorea.ya
Trapminemalicious.high.ml.score
TrendMicroTROJ_CUEGOE.SM
TrendMicro-HouseCallTROJ_CUEGOE.SM
VBA32TrojanDownloader.Upatre
VIPRETrojan.GenericKD.45887308
VaristW32/Salgorea.M.gen!Eldorado
ViRobotTrojan.Win32.Agent.497664.G
XcitiumApplication.Win32.Amonetize.NE@5te978
ZillyaTrojan.Agent.Win32.701049
ZoneAlarmHEUR:Backdoor.Win32.Salgorea.gen
tehtrisGeneric.Malware

Process list

NameCommand line
2023-08-26_fdbf9328269caf57c3b7d21094ac2c94_mafia.exe
7C94.tmp
7F44.tmp
81E4.tmp
8484.tmp
8772.tmp
8A8E.tmp
8CE0.tmp
8F90.tmp
9210.tmp
F157.tmp
F406.tmp
F697.tmp
F946.tmp
FBE6.tmp
FE57.tmp
E7.tmp
378.tmp
6E3.tmp
9D1.tmp