ee5dbfca30be494b6ad8ac1c18255b6054339de4aba768180a1f32e9921a30ce

Classification: Malicious

ee5dbfca30be494b6ad8ac1c18255b6054339de4aba768180a1f32e9921a30ce is a malicious file sample (Windows executable, 47.5 KB). Linked to Samsam, Asyncrat malware.

Detection summary

  • 0 antivirus detections (78% detection ratio)
  • 0 IDS alerts
  • 1 processes observed
  • 2 contacted hosts
  • 3 DNS requests

MITRE ATT&CK associations

Malware families: SAMSAM (S0370) ASYNCRAT (S1087)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
AsyncRAT ThreatFox Abuse.ch 2026-09-15 05:40:05 2026-09-15 06:25:57 S1087 AsyncRAT
Gen:Variant.Ransom.Samas Hybrid-Analysis 2020-10-02 19:45:42 2020-10-02 19:45:42 S0370 SamSam

Tags

evasive ransomware win.asyncrat

Sample information

Filenames
file
File type
PE32 executable (GUI) Intel 80386 Mono/.Net assemb ...
Size
48640 bytes
MD5
5c712ad920ca39c2528d344de01f9105
SHA-1
00b312650f90703d55a9d2d228e728ea185855b8
SHA-256
ee5dbfca30be494b6ad8ac1c18255b6054339de4aba768180a1f32e9921a30ce
First indexed
2020-10-02 19:45:42
Last updated
2026-09-15 10:14:48

Network contacts

51.143.111.81 193.239.147.16

DNS requests

_ldap._tcp.dc._msdcs.scl3.dc isatap.scl3.dc wpad.scl3.dc

Process list

NameCommand line
file.exe