2026-02-20_2b54d0eaa908774d24a453f0b426050a_agent-tesla_amadey_cloudeye_cobalt-strike_darkgate_elex_emotet_glassworm_hellokitty_hijackloader_icedid_luca-stealer_manuscrypt_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop_vidar_xloader
Classification: Malicious
2026-02-20_2b54d0eaa908774d24a453f0b426050a_agent-tesla_amadey_cloudeye_cobalt-strike_darkgate_elex_emotet_glassworm_hellokitty_hijackloader_icedid_luca-stea…
Detection summary
- 52 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Generic Malware |
Triage |
2026-02-20 04:59:34 |
2026-02-20 04:59:34 |
malicious-activity
|
|
Tags
adware
discovery
persistence
spyware
stealer
Sample information
- Filenames
- 2026-02-20_2b54d0eaa908774d24a453f0b426050a_agent-tesla_amadey_cloudeye_cobalt-strike_darkgate_elex_emotet_glassworm_hellokitty_hijackloader_icedid_luca-stealer_manuscrypt_njrat_redline-stealer_remcos_rhadamanthys_smoke-loader_stealc_stop_vidar_xloader
- MD5
2b54d0eaa908774d24a453f0b426050a- SHA-1
e515881ed5b393748c7b7e4e0d84b085aa8ae61b- SHA-256
e78d31d372ea54509ff418424623f7952fa8e7aba96d37677b0b79873c2b363f- SHA-512
311fd89b2cf53e9f518571a7a25ac3366219230b2f8c5692ea2b57dbe523620d52266f9ac18e7be00713fc24faf322a9e8733ea136e4931d548a4d8cc6fdea09- First indexed
- 2026-02-20 04:59:34
- Last updated
- 2026-09-03 00:56:46
Antivirus detections
| Engine | Detection |
|---|
| ALYac | Application.Generic.4657488 |
| APEX | Malicious |
| AVG | Win32:Malware-gen |
| AhnLab-V3 | Malware/Win32.RL_Generic.R296972 |
| Arcabit | Application.Generic.D471150 |
| Avast | Win32:Malware-gen |
| Avira | TR/Dropper.Gen |
| BitDefender | Application.Generic.4657488 |
| CTX | exe.unknown.generic |
| ClamAV | Win.Malware.Razy-6988968-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Win32.Kiemthe.1 |
| ESET-NOD32 | Win32/Packed.Autoit.H suspicious application |
| Elastic | malicious (high confidence) |
| Emsisoft | Application.Generic.4657488 (B) |
| F-Secure | Trojan.TR/Dropper.Gen |
| Fortinet | W32/AutoitInject.PS!tr |
| GData | Application.Generic.4657488 |
| Google | Detected |
| Gridinsoft | Trojan.Win32.Packed.sa |
| Ikarus | Trojan.Dropper |
| K7AntiVirus | Trojan ( 700000111 ) |
| K7GW | Trojan ( 700000111 ) |
| Kaspersky | HEUR:Trojan.Script.Generic |
| Lionic | Trojan.Win32.Autoit.4!c |
| Malwarebytes | Neshta.Virus.FileInfector.DDS |
| MaxSecure | Trojan.Autoit.AZA |
| McAfeeD | Trojan:Win/SuspiciousAutoit.A |
| MicroWorld-eScan | Application.Generic.4657488 |
| Microsoft | Trojan:Win32/AutoitInject.PS!MTB |
| Paloalto | generic.ml |
| Panda | Trj/CI.A |
| Rising | Trojan.Generic!8.C3 (LESS:bWQ1OitU0OqpCHdNJKRT8LQmBQo) |
| Sangfor | Trojan.Win32.Save.a |
| Skyhigh | Trojan-AutoIt.b |
| Sophos | Generic Reputation PUA (PUA) |
| Symantec | Trojan.Gen.MBT |
| Tencent | Script.Trojan.Generic.Tsmw |
| Trapmine | malicious.high.ml.score |
| TrellixENS | Artemis!2B54D0EAA908 |
| TrendMicro | TROJ_GEN.R002C0DBK26 |
| TrendMicro-HouseCall | TROJ_GEN.R002C0DBK26 |
| VBA32 | Trojan.Autoit.F |
| VIPRE | Application.Generic.4657488 |
| Varist | W32/MSIL_Agent.EK.gen!Eldorado |
| Webroot | W32.Trojan.Gen |
| Xcitium | Worm.Win32.P2P-Worm.Palevo.fghk@4w2owj |
| Zillya | Trojan.Generic.Script.20 |
| alibabacloud | Trojan[dropper]:Win/AutoitInject.PB8PHU |