f3148c42747ad5d0908dca44309881e9ffda509872db2cb8a2ba24c294b45660

Classification: Malicious

f3148c42747ad5d0908dca44309881e9ffda509872db2cb8a2ba24c294b45660 is a trojan (application/x-dosexec). Detected by 78 antivirus engines.

Detection summary

  • 78 antivirus detections
  • 3 IDS alerts
  • 0 processes observed
  • 2 contacted hosts
  • 2 DNS requests

MITRE ATT&CK associations

Malware families: DARKTORTILLA (S1066)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-09-15 06:45:08 2026-09-15 06:45:08 malicious-activity
DarkTortilla ThreatFox Abuse.ch 2024-09-05 00:04:42 2024-09-07 00:04:32 S1066 DarkTortilla
DarkTortilla MalwareBazaar Abuse.ch 2024-09-04 13:22:39 2024-09-04 13:22:39 malicious-activity S1066 DarkTortilla

Tags

win.darktortilla evasive

Sample information

Filenames
f3148c42747ad5d0908dca44309881e9ffda509872db2cb8a2ba24c294b45660
File type
application/x-dosexec
MD5
ec00238379ba4a3705b5545ffac93861
SHA-1
e4703502bf39562223c9ab75843f32b0e0ae234b
SHA-256
f3148c42747ad5d0908dca44309881e9ffda509872db2cb8a2ba24c294b45660
First indexed
2024-09-04 14:19:18
Last updated
2026-09-28 01:17:12

Antivirus detections

EngineDetection
ALYacGen:Variant.Jalapeno.16218
APEXMalicious
AVGWin32:PWSX-gen [Trj]
AhnLab-V3Trojan/Win.Fileless.C5652551
AlibabaTrojan:MSIL/Kryptik.707f0ed7
ArcabitTrojan.Jalapeno.D3F5A
AvastWin32:PWSX-gen [Trj]
AviraTR/AD.SnakeStealer.jwrbt
BitDefenderGen:Variant.Jalapeno.16218
BitDefenderThetaGen:NN.ZemsilF.36812.Wm0@aaZwMQj
BkavW32.AIDetectMalware.CS
CrowdStrikewin/malicious_confidence_100% (W)
Cybereasonmalicious.379ba4
CylanceUnsafe
DeepInstinctMALICIOUS
ESET-NOD32a variant of MSIL/Kryptik.AMAE
Elasticmalicious (high confidence)
EmsisoftGen:Variant.Jalapeno.16218 (B)
F-SecureTrojan.TR/AD.SnakeStealer.jwrbt
FireEyeGeneric.mg.ec00238379ba4a37
FortinetMSIL/Kryptik.AMAD!tr
GDataGen:Variant.Jalapeno.16218
GoogleDetected
IkarusTrojan-Spy.AgentTesla
K7AntiVirusTrojan ( 005b85631 )
K7GWTrojan ( 005b85631 )
KasperskyHEUR:Trojan.MSIL.Crypt.gen
Kingsoftmalware.kb.c.998
MAXmalware (ai score=84)
MalwarebytesMachineLearning/Anomalous.95%
MaxSecureTrojan.Malware.11716371.susgen
McAfeeDti!F3148C42747A
MicroWorld-eScanGen:Variant.Jalapeno.16218
MicrosoftTrojan:Win32/Leonem
NANO-AntivirusTrojan.Win32.SnakeStealer.krcpbq
PandaTrj/GdSda.A
RisingMalware.Obfus/[email protected] (RDM.MSIL2:UTsXQF+F0DPeL7gSI5rGVg)
SentinelOneStatic AI - Malicious PE
SkyhighBehavesLike.Win32.Generic.bc
SophosMal/Generic-S
SymantecML.Attribute.HighConfidence
Trapminemalicious.moderate.ml.score
TrendMicroTROJ_GEN.R06CC0DGR24
TrendMicro-HouseCallTROJ_GEN.R06CC0DGR24
VIPREGen:Variant.Jalapeno.16218
VaristW32/MSIL_Agent.ILQ.gen!Eldorado
ZoneAlarmHEUR:Trojan.MSIL.Crypt.gen
huorongTrojan/MSIL.Injector.nj
AVGWin32:MalwareX-gen [Pws]
Antiy-AVLTrojan/MSIL.Crypt
AvastWin32:MalwareX-gen [Pws]
AviraTR/W32.MalwareX
BkavW32.Malware.3CD8E732
CTXexe.trojan.msil
DrWebTrojan.MulDrop28.17163
ESET-NOD32MSIL/Kryptik.AMAE trojan
F-SecureTrojan.TR/W32.MalwareX
FortinetMSIL/GetType.AB!tr
JiangminTrojan.MSIL.apekd
K7AntiVirusTrojan ( 005ebd821 )
K7GWTrojan ( 005ebd821 )
KingsoftMSIL.Trojan.Crypt.gen
LionicTrojan.Win32.Crypt.4!c
MalwarebytesTrojan.MalPack
MicrosoftTrojan:MSIL/StealC.MBXN!MTB
Paloaltogeneric.ml
RisingMalware.Obfus/[email protected] (RDM.MSIL2:z/etn89kWDb5SAh6oECdCw)
SangforSuspicious.Win32.Save.a
SymantecTrojan Horse
TACHYONTrojan/W32.DN-Crypt.793088.C
TencentMalware.Win32.Gencirc.1495be9b
TrellixENSArtemis!EC00238379BA
TrendMicro-HouseCallTrojan.Win32.VSX.PE04CA5
VBA32TScope.Trojan.MSIL
VirITTrojan.Win32.MSIL.HGQ
XcitiumMalware@#15f7zv5y869kn
YandexTrojan.Crypt!Yw9z8ajh48E
alibabacloudTrojan:MSIL/StealC.MKFB3DGW

Network contacts

132.226.247.73 172.67.177.134

DNS requests

checkip.dyndns.org reallyfreegeoip.org