f8f9a55479c8f1d3502b3c47d0ac70be61f40f5fa23b59dc4a766cc0e7f590d2
Classification: Malicious
f8f9a55479c8f1d3502b3c47d0ac70be61f40f5fa23b59dc4a766cc0e7f590d2 is a trojan (application/x-dosexec). Detected by 41 antivirus engines.
Detection summary
- 41 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: AGENT TESLA (S0331)
Intrusion sets: TURLA (G0010)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Snake | ThreatFox Abuse.ch | 2025-02-20 09:36:13 | 2025-02-22 09:50:21 | G0010 Turla | |
| AgentTesla | Abuse.ch | 2021-11-28 07:31:54 | 2021-11-28 07:31:54 | malicious-activity | S0331 Agent Tesla |
Tags
win.snake ekans snakehoseSample information
- Filenames
- 16d2d4df7930ae194a64eed0b788a4a6.exe
- File type
- application/x-dosexec
- MD5
16d2d4df7930ae194a64eed0b788a4a6- SHA-1
6396487cb6ab1d45fc21819fcb628302e68bb43a- SHA-256
f8f9a55479c8f1d3502b3c47d0ac70be61f40f5fa23b59dc4a766cc0e7f590d2- First indexed
- 2021-11-28 08:15:09
- Last updated
- 2026-09-11 02:25:17
Antivirus detections
| Engine | Detection |
|---|---|
| Elastic | malicious (high confidence) |
| DrWeb | Trojan.PWS.Steam.21709 |
| MicroWorld-eScan | Trojan.GenericKDZ.80629 |
| FireEye | Trojan.GenericKDZ.80629 |
| Malwarebytes | Trojan.Downloader.MSIL.Generic |
| K7AntiVirus | Trojan-Downloader ( 0058a4eb1 ) |
| K7GW | Trojan-Downloader ( 0058a4eb1 ) |
| Cyren | W32/MSIL_Kryptik.CKI.gen!Eldorado |
| Symantec | ML.Attribute.HighConfidence |
| ESET-NOD32 | a variant of MSIL/TrojanDownloader.Agent.JKP |
| APEX | Malicious |
| Kaspersky | HEUR:Trojan-PSW.MSIL.Stealer.gen |
| BitDefender | Trojan.GenericKDZ.80629 |
| Avast | Win32:DangerousSig [Trj] |
| Ad-Aware | Trojan.GenericKDZ.80629 |
| Emsisoft | Trojan.GenericKDZ.80629 (B) |
| Ikarus | Trojan-Downloader.MSIL.Discord |
| Microsoft | Trojan:Win32/Woreflint.A!cl |
| GData | Trojan.GenericKDZ.80629 |
| VBA32 | TScope.Trojan.MSIL |
| ALYac | Trojan.GenericKDZ.80629 |
| MAX | malware (ai score=85) |
| Cylance | Unsafe |
| SentinelOne | Static AI - Suspicious PE |
| Fortinet | MSIL/Agent.JKP!tr.dldr |
| AVG | Win32:DangerousSig [Trj] |
| CrowdStrike | win/malicious_confidence_90% (W) |
| Lionic | Trojan.MSIL.Stealer.i!c |
| CAT-QuickHeal | Trojanpws.Msil |
| Alibaba | TrojanPSW:MSIL/Stealer.49e6b399 |
| Paloalto | generic.ml |
| Tencent | Msil.Trojan-downloader.Agent.Eadu |
| TrendMicro | TROJ_GEN.R002C0WKQ21 |
| Sophos | Mal/Generic-S |
| Avira | TR/Dldr.Agent.vmscg |
| Kingsoft | Win32.PSWTroj.Undef.(kcloud) |
| Gridinsoft | Trojan.Win32.Downloader.sa |
| Arcabit | Trojan.Generic.D13AF5 |
| Cynet | Malicious (score: 99) |
| McAfee | Artemis!16D2D4DF7930 |
| Yandex | Trojan.DL.Agent!lOY49okuEeo |