2026-08-21_2912c00dce4c615730753536946d3d7d_agent-tesla_darkgate_elex_maze_remcos
Classification: Malicious
2026-08-21_2912c00dce4c615730753536946d3d7d_agent-tesla_darkgate_elex_maze_remcos is a trojan. Detected by 50 antivirus engines.
Detection summary
- 50 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: REVENGE RAT (S0379)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Revengerat | Triage | 2026-08-21 04:49:12 | 2026-08-21 04:49:12 | malicious-activity | S0379 Revenge RAT |
Tags
revengerat guest discovery persistence privilege_escalation trojanSample information
- Filenames
- 2026-08-21_2912c00dce4c615730753536946d3d7d_agent-tesla_darkgate_elex_maze_remcos
- SHA-256
fa310e19994a037d2a0237c3ededbc1c29d426a762182deabf8f66015666241a- First indexed
- 2026-08-21 04:49:12
- Last updated
- 2026-10-14 03:21:20
Antivirus detections
| Engine | Detection |
|---|---|
| APEX | Malicious |
| AVG | Script:SNH-gen [Trj] |
| AhnLab-V3 | Win-Trojan/AutoInj.Exp |
| Alibaba | Trojan:Win32/AutoitU.ali2000008 |
| Antiy-AVL | HackTool[VirTool]/Win32.AutInject |
| Arcabit | Trojan.Generic.D268D9B0 |
| Avast | Script:SNH-gen [Trj] |
| BitDefender | Trojan.Generic.40425904 |
| Bkav | W32.Malware.E375E7D7 |
| CAT-QuickHeal | Trojan.Script |
| CTX | exe.trojan.autoit |
| ClamAV | Win.Trojan.Autoit-9790232-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | BackDoor.RevetRat.2 |
| ESET-NOD32 | Win32/Injector.Autoit.DWA trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Trojan.Generic.40425904 (B) |
| Fortinet | AutoIt/Injector.DWA!tr |
| GData | MSIL.Backdoor.RevengeRAT.14YNVC |
| Detected | |
| Gridinsoft | Trojan.Win32.Downloader.oa!s1 |
| Jiangmin | Trojan.Script.auwi |
| K7AntiVirus | Trojan ( 005988621 ) |
| K7GW | Trojan ( 005988621 ) |
| Kaspersky | HEUR:Trojan.Script.Generic |
| Lionic | Trojan.Script.Generic.4!c |
| Malwarebytes | Malware.AI.288779274 |
| MaxSecure | Trojan.Malware.300983.susgen |
| McAfeeD | ti!FA310E19994A |
| MicroWorld-eScan | Trojan.Generic.40425904 |
| Microsoft | Trojan:Win32/Remcos!pz |
| Paloalto | generic.ml |
| Panda | Trj/Genetic.gen |
| Rising | Trojan.Injector/Autoit!1.BB8F (CLOUD) |
| Sangfor | Virus.Win32.Save.a |
| Skyhigh | BehavesLike.Win32.Dropper.tc |
| Sophos | Mal/AuItInj-A |
| Symantec | AUT.Heuristic!gen5 |
| Tencent | Unk.Win32.Script.404973 |
| TrellixENS | Artemis!2912C00DCE4C |
| TrendMicro | Trojan.AutoIt.CRYPTINJECT.SMA |
| TrendMicro-HouseCall | Trojan.AutoIt.CRYPTINJECT.SMA |
| VBA32 | Backdoor.RevetRat |
| Varist | W32/Autoit.WI.gen!Eldorado |
| ZoneAlarm | Mal/AuItInj-A |
| alibabacloud | Trojan:Win/Revenge.50dec5f5 |
| tehtris | Generic.Malware |