2026-10-17_d56951a0662669623fe956a4f72468cd_agent-tesla_darkgate_elex_hawkeye_maze_netwire_remcos_xloader
Classification: Malicious
2026-10-17_d56951a0662669623fe956a4f72468cd_agent-tesla_darkgate_elex_hawkeye_maze_netwire_remcos_xloader is a trojan. Detected by 62 antivirus engines.
Detection summary
- 62 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: NETWIRE (S0198)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Netwire | Triage | 2026-10-18 04:51:54 | 2026-10-18 04:51:54 | malicious-activity | S0198 NETWIRE |
Tags
netwire warzonerat botnet defense_evasion discovery execution infostealer persistence rat stealerSample information
- Filenames
- 2026-10-17_d56951a0662669623fe956a4f72468cd_agent-tesla_darkgate_elex_hawkeye_maze_netwire_remcos_xloader
- SHA-256
f030d5fbb7dec5fcf4e2dad28cb55b20c0ab73432ca7dfce636b932f2e0c41e4- First indexed
- 2026-10-18 04:51:54
- Last updated
- 2026-10-18 04:51:54
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | AIT:Trojan.Weecnaw.1 |
| APEX | Malicious |
| AVG | Win32:MalwareX-gen [Rat] |
| Alibaba | TrojanSpy:Win32/NetWire.f997f8b1 |
| Antiy-AVL | Trojan/Win32.NetWire |
| Arcabit | Trojan.Variadic.A.187.1 [many] |
| Avast | Win32:MalwareX-gen [Rat] |
| Avira | TR/Spy.Gen |
| BitDefender | Gen:Heur.Variadic.A.187.1 |
| Bkav | W32.Malware.3207AB9C |
| CTX | exe.trojan.netwire |
| ClamAV | Win.Trojan.Ulise-7135679-1 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | BackDoor.Wirenet.543 |
| ESET-NOD32 | Win32/Spy.Weecnaw.O trojan |
| Elastic | Windows.Trojan.Netwire |
| Emsisoft | Gen:Heur.Variadic.A.187.1 (B) |
| F-Secure | Trojan.TR/Spy.Gen |
| Fortinet | AutoIt/Injector.DUY!tr |
| GData | AIT:Trojan.Weecnaw.1 |
| Detected | |
| Gridinsoft | Trojan.Heur!.03006021 |
| Ikarus | Trojan-PSW.Delf |
| K7AntiVirus | Trojan ( 005c86201 ) |
| K7GW | Trojan ( 005c86201 ) |
| Kaspersky | Trojan.Win32.NetWire.bh |
| Kingsoft | Win32.Trojan.NetWire.bh |
| Malwarebytes | Weecnaw.Spyware.Stealer.DDS |
| MaxSecure | Trojan.Malware.300983.susgen |
| McAfeeD | Trojan:Win/AveMaria.OX |
| MicroWorld-eScan | Gen:Heur.Variadic.A.187.1 |
| Microsoft | Trojan:Win32/NetWire!pz |
| NANO-Antivirus | Trojan.Win32.Dapato.fbcjkw |
| Paloalto | generic.ml |
| Panda | Trj/Genetic.gen |
| Rising | Backdoor.NetWire!1.B84F (CLASSIC) |
| Sangfor | Virus.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win32.Dropper.th |
| Sophos | Troj/Netwire-MS |
| Symantec | ML.Attribute.HighConfidence |
| Tencent | Trojan.Win32.Autoit_new.404661 |
| Trapmine | malicious.high.ml.score |
| TrellixENS | Artemis!D56951A06626 |
| TrendMicro | TSPY_WEECNAW.SMC |
| TrendMicro-HouseCall | TSPY_WEECNAW.SMC |
| VBA32 | BScope.TrojanSpy.Loyeetro |
| VIPRE | Gen:Heur.Variadic.A.187.1 |
| Varist | W32/Trojan.BIA.gen!Eldorado |
| ViRobot | Trojan.Win.Z.Weecnaw.1461898.G |
| VirIT | Backdoor.Win32.Wirenet.CCS |
| Webroot | W32.Backdoor.Gen |
| Xcitium | TrojWare.Win32.TrojanSpy.Loyeetro.A@8lofxp |
| Yandex | Trojan.GenAsa!wuPhUbOs0XU |
| ZoneAlarm | Mal/AuItInj-A |
| Zoner | Trojan.Win32.124944 |
| alibabacloud | Trojan:Win/Weecnaw |
| huorong | Trojan/Injector.blh |
| tehtris | Generic.Malware |