f5c245bd4d7eb95f9a2afde8960ef9c9640ad426a8e438b52caca1541b928954
Classification: Malicious
f5c245bd4d7eb95f9a2afde8960ef9c9640ad426a8e438b52caca1541b928954 is a trojan (application/x-dosexec). Detected by 81 antivirus engines.
Detection summary
- 81 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: FINFISHER (S0182)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Cyber Threat Alliance | 2026-10-09 10:19:57 | 2026-10-10 10:08:09 | malicious-activity | |
| Generic.Malware | Abuse.ch | 2021-09-28 16:06:10 | 2021-09-28 16:06:10 | malicious-activity | |
| FinFisher | Abuse.ch | 2021-09-28 16:06:10 | 2021-09-28 16:06:10 | malicious-activity | S0182 FinFisher |
Sample information
- Filenames
- f5c245bd4d7eb95f9a2afde8960ef9c9640ad426a8e438b52caca1541b928954.bin
- File type
- application/x-dosexec
- MD5
31f1d208ee740e1fdf9667b2e525f3d7- SHA-1
b22803b204080dcd861e2debadea76cf2fd8b99c- SHA-256
f5c245bd4d7eb95f9a2afde8960ef9c9640ad426a8e438b52caca1541b928954- First indexed
- 2021-09-28 18:15:09
- Last updated
- 2026-08-28 02:29:15
Antivirus detections
| Engine | Detection |
|---|---|
| Bkav | W32.AIDetect.malware2 |
| Lionic | Trojan.Win32.Finfish.m!c |
| Elastic | malicious (high confidence) |
| DrWeb | Trojan.DownLoader43.25432 |
| MicroWorld-eScan | Trojan.GenericKD.37616900 |
| FireEye | Generic.mg.31f1d208ee740e1f |
| CAT-QuickHeal | Backdoor.Finfish |
| McAfee | Artemis!31F1D208EE74 |
| Cylance | Unsafe |
| Zillya | Backdoor.Finfish.Win32.69 |
| K7AntiVirus | Trojan ( 005882bc1 ) |
| Alibaba | Backdoor:Win32/Finfish.c7f754a8 |
| K7GW | Trojan ( 005882bc1 ) |
| Symantec | Trojan Horse |
| ESET-NOD32 | Win32/FinSpy.AJ |
| Paloalto | generic.ml |
| Kaspersky | Backdoor.Win32.Finfish.lv |
| BitDefender | Trojan.GenericKD.37616900 |
| Rising | [email protected] (RDMK:MBwGUDZjgBG3Kaz+UYFFYw) |
| Ad-Aware | Trojan.GenericKD.37616900 |
| Emsisoft | Trojan.GenericKD.37616900 (B) |
| McAfee-GW-Edition | BehavesLike.Win32.Generic.vc |
| Sophos | Mal/Generic-S |
| Ikarus | Trojan.Win32.Finspy |
| Avira | TR/FinSpy.lvyms |
| Kingsoft | Win32.Hack.Undef.(kcloud) |
| Microsoft | Trojan:Win32/Casdet!rfn |
| Arcabit | Trojan.Generic.D23DFD04 |
| ViRobot | Trojan.Win32.Z.Finfish.2738679 |
| ZoneAlarm | Backdoor.Win32.Finfish.lv |
| GData | Trojan.GenericKD.37616900 |
| VBA32 | Backdoor.Finfish |
| ALYac | Backdoor.Finfish.gen |
| MAX | malware (ai score=82) |
| Malwarebytes | Malware.AI.4280709891 |
| TrendMicro-HouseCall | TROJ_FRS.VSNW17I21 |
| Tencent | Win32.Backdoor.Finfish.Lkxl |
| MaxSecure | Trojan.Malware.4630294.susgen |
| Webroot | W32.Trojan.Finspy |
| ALYac | Trojan.GenericKD.37616900 |
| Ikarus | Trojan.Win32.Meterpreter |
| AVG | Win32:Evo-gen [Trj] |
| AhnLab-V3 | Trojan/Win.Generic.R514580 |
| Alibaba | Backdoor:Win32/FinSpy.aef2a40d |
| Antiy-AVL | Trojan[Backdoor]/Win32.Finfish |
| Arcabit | Trojan.Generic.D42DCB13 |
| Avast | Win32:Evo-gen [Trj] |
| BitDefender | Trojan.GenericKD.70109971 |
| CTX | exe.trojan.finfish |
| CrowdStrike | win/malicious_confidence_100% (W) |
| DeepInstinct | MALICIOUS |
| ESET-NOD32 | Win32/FinSpy.AJ trojan |
| Emsisoft | Trojan.GenericKD.70109971 (B) |
| Fortinet | W32/FRS.VSNW17I21!tr |
| GData | Trojan.GenericKD.70109971 |
| Detected | |
| Gridinsoft | Trojan.Win32.AI.oa!s1 |
| K7AntiVirus | Spyware ( 005d62a61 ) |
| K7GW | Spyware ( 005d62a61 ) |
| Kingsoft | Win32.Hack.FinFish.a |
| Lionic | Trojan.Win32.Finfish.4!c |
| Malwarebytes | Malware.AI.759381783 |
| McAfeeD | ti!F5C245BD4D7E |
| MicroWorld-eScan | Trojan.GenericKD.70109971 |
| Microsoft | Backdoor:Win32/FinSpy!MTB |
| NANO-Antivirus | Trojan.Win32.Finfish.jpssir |
| Panda | Trj/CI.A |
| Rising | Backdoor.Finfish!8.192 (CLOUD) |
| Sangfor | Suspicious.Win32.Save.ins |
| Skyhigh | BehavesLike.Win32.Dropper.vc |
| Tencent | Win32.Backdoor.Finfish.Ncnw |
| TrellixENS | Backdoor.gen.ad |
| TrendMicro | Backdoor.Win32.FINSPY.A |
| TrendMicro-HouseCall | Backdoor.Win32.FINSPY.A |
| VIPRE | Trojan.GenericKD.70109971 |
| Varist | W32/FinSpy.WZXN-3392 |
| Xcitium | Malware@#3g4wg1wezk7zn |
| ZoneAlarm | Troj/Agent-BHTN |
| alibabacloud | Backdoor:Win/GetProxy.AZ |
| huorong | TrojanSpy/GetProxy.a |
| Malwarebytes | Generic.Malware/Suspicious |