e8a091a84dd2ea7ee429135ff48e9f48f7787637ccb79f6c3eb42f34588bc684.exe

Classification: Malicious

e8a091a84dd2ea7ee429135ff48e9f48f7787637ccb79f6c3eb42f34588bc684.exe is a malicious file sample. Linked to Maze malware. Detected by 103 antivirus engines.

Detection summary

  • 103 antivirus detections (90% detection ratio)
  • 1 IDS alerts
  • 3 processes observed
  • 14 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: MAZE (S0449)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Cyber Threat Alliance 2026-08-10 10:15:24 2026-08-10 10:15:24 malicious-activity
Maze Triage 2026-03-03 16:30:04 2026-03-03 16:30:04 malicious-activity S0449 Maze
Generic Malware Hybrid-Analysis 2023-11-29 03:00:03 2023-11-29 04:45:12
DeepScan:Generic.Ransom.GarrantDecrypt.B Hybrid-Analysis 2020-02-06 11:00:09 2020-02-06 11:00:09

Tags

adwind agenttesla alienspy banker bladabindi chanitor chthonic cridex crimson darkcomet dofoil dridex dyre dyreza emotet fareit gootkit gozi hancitor hawkeye infostealer isfb keylogger lokibot maldoc msil nanocore netwire neutrino neverquest njrat papras poisonivy pony predator qakbot rat rootkit smokeloader stealer trojan troldesh ursnif vawtrak wanacrypt0r wannacry wcry zbot zeus maze credential_access defense_evasion discovery execution impact ransomware spyware

Sample information

Filenames
e8a091a84dd2ea7ee429135ff48e9f48f7787637ccb79f6c3eb42f34588bc684.exe, e8a091a84dd2ea7ee429135ff48e9f48f7787637ccb79f6c3eb42f34588bc684
File type
PE32 executable (GUI) Intel 80386, for MS Windows
Size
484352 bytes
MD5
f83fb9ce6a83da58b20685c1d7e1e546
SHA-1
01c459b549c1c2a68208d38d4ba5e36d29212a4f
SHA-256
e8a091a84dd2ea7ee429135ff48e9f48f7787637ccb79f6c3eb42f34588bc684
SHA-512
934ec9073a28b90e8df785bef49f224789da59f83729208b92dba0503e2894b3f48ed04b20de1ba49374b1cd26f0c87e8e5ab79e817258135e3be2c171f3f396
First indexed
2020-02-06 11:00:09
Last updated
2026-05-04 03:14:39

Antivirus detections

EngineDetection
BkavW32.AIDetectVM.malware2
MicroWorld-eScanDeepScan:Generic.Ransom.GarrantDecrypt.B.0A449CF2
CAT-QuickHealTrojanransom.Gen
McAfeeRansomware-GOO!F83FB9CE6A83
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
SangforMalware
K7AntiVirusTrojan ( 0054eec21 )
AlibabaRansom:Win32/Kryptik.7ce401b1
Cybereasonmalicious.e6a83d
ArcabitDeepScan:Generic.Ransom.GarrantDecrypt.B.0A449CF2
Invinceaheuristic
CyrenW32/Ransom.CRIB-3160
SymantecTrojan.Gen.2
ESET-NOD32a variant of Win32/Kryptik.GTLN
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Ransomware.Maze-7473753-0
KasperskyTrojan-Ransom.Win32.Gen.qqa
BitDefenderDeepScan:Generic.Ransom.GarrantDecrypt.B.0A449CF2
NANO-AntivirusTrojan.Win32.Kryptik.fqtcyq
ViRobotTrojan.Win32.S.MazeRansom.484352
AvastWin32:Adware-gen [Adw]
RisingRansom.Maze!1.B8D7 (CLOUD)
Ad-AwareDeepScan:Generic.Ransom.GarrantDecrypt.B.0A449CF2
SophosTroj/Ransom-FLM
ComodoApplicUnwnt@#34bwda28zolzm
F-SecureTrojan.TR/Kryptik.ijmxi
DrWebTrojan.Siggen8.30087
ZillyaTrojan.Gen.Win32.2148
TrendMicroRansom.Win32.MAZE.H
McAfee-GW-EditionBehavesLike.Win32.Generic.gc
Trapminemalicious.high.ml.score
FireEyeGeneric.mg.f83fb9ce6a83da58
EmsisoftDeepScan:Generic.Ransom.GarrantDecrypt.B.0A449CF2 (B)
SentinelOneDFI - Malicious PE
F-ProtW32/Ransom.AEE
JiangminTrojan.Gen.aeb
WebrootW32.Trojan.Ransom
AviraTR/Kryptik.ijmxi
eGambitUnsafe.AI_Score_99%
MAXmalware (ai score=100)
Antiy-AVLTrojan[Ransom]/Win32.Gen
Endgamemalicious (high confidence)
MicrosoftRansom:Win32/Maze
ZoneAlarmTrojan-Ransom.Win32.Gen.qqa
GDataDeepScan:Generic.Ransom.GarrantDecrypt.B.0A449CF2
AhnLab-V3Trojan/Win32.MazeRansom.R272934
Acronissuspicious
VBA32BScope.Trojan.Wacatac
ALYacTrojan.Ransom.ChaCha
TACHYONRansom/W32.Maze.484352
TrendMicro-HouseCallRansom.Win32.MAZE.H
TencentWin32.Trojan.Gen.Eckd
YandexTrojan.Gen!xihd/J8az9U
IkarusTrojan.Win32.Crypt
MaxSecureTrojan.Malware.73774235.susgen
FortinetW32/GenKryptik.DJDC!tr
BitDefenderThetaAI:Packer.83513CFF1E
AVGWin32:Adware-gen [Adw]
PandaTrj/GdSda.A
CrowdStrikewin/malicious_confidence_100% (W)
Qihoo-360HEUR/QVM10.2.7AD9.Malware.Gen
AlibabaRansom:Win32/Kryptik.1ffdb2a9
ArcabitDump:Generic.Ransom.GarrantDecrypt.B.0A449CF2
AviraHEUR/AGEN.1317028
BitDefenderDump:Generic.Ransom.GarrantDecrypt.B.0A449CF2
BkavW32.WsisoesNAAA.Trojan
CTXexe.ransomware.maze
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
ESET-NOD32Win32/Kryptik.HDBT trojan
Elasticmalicious (high confidence)
EmsisoftDump:Generic.Ransom.GarrantDecrypt.B.0A449CF2 (B)
F-SecureHeuristic.HEUR/AGEN.1317028
FortinetW32/Kryptik.HDBT!tr
GDataDump:Generic.Ransom.GarrantDecrypt.B.0A449CF2
GoogleDetected
GridinsoftMalware.Win32.Gen.cc
K7AntiVirusTrojan ( 00605e651 )
K7GWTrojan ( 00605e651 )
KingsoftWin32.Trojan-Ransom.Gen.qqa
LionicTrojan.Win32.Gen.trvs
MalwarebytesMalware.AI.2431178578
MaxSecureTrojan.Malware.328132715.susgen
McAfeeDReal Protect-LS!F83FB9CE6A83
MicroWorld-eScanDump:Generic.Ransom.GarrantDecrypt.B.0A449CF2
RisingRansom.Maze!1.B8D7 (CLASSIC)
SangforTrojan.Win32.Save.a
SentinelOneStatic AI - Malicious PE
SkyhighRansomware-GOO!F83FB9CE6A83
SophosMal/Generic-S
SymantecRansom.Maze!gm
TencentMalware.Win32.Gencirc.10bdc27e
TrellixENSRansomware-GOO!F83FB9CE6A83
VIPREDump:Generic.Ransom.GarrantDecrypt.B.0A449CF2
VaristW32/Ransom.CRIB-3160
VirITAdware.Win32.Genus.BNN
XcitiumMalware@#34bwda28zolzm
YandexTrojan.GenAsa!ZDFVSmFEt90
ZoneAlarmTroj/Ransom-FLM
alibabacloudRansomware:Win/Maze.Gen
huorongRansom/ChaCha.a

Network contacts

92.63.8.47 92.63.32.2 92.63.37.100 92.63.194.20 92.63.17.245 92.63.32.55 92.63.11.151 92.63.194.3 92.63.15.8 92.63.29.137 92.63.32.57 92.63.15.56 92.63.32.52 92.63.15.6

Process list

NameCommand line
e8a091a84dd2ea7ee429135ff48e9f48f7787637ccb79f6c3eb42f34588bc684.exe
e8a091a84dd2ea7ee429135ff48e9f48f7787637ccb79f6c3eb42f34588bc684.exe
WMIC.exeshadowcopy delete