ff267549b8f842b37cdbfbfa8bda58e4569235b78175c1aa1e8944658da7f50d

Classification: Malicious

ff267549b8f842b37cdbfbfa8bda58e4569235b78175c1aa1e8944658da7f50d is a trojan (Windows executable). Detected by 77 antivirus engines. Linked to Turla activity.

Detection summary

  • 77 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: TURLA (G0010)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Snake ThreatFox Abuse.ch 2025-02-20 09:36:51 2025-02-22 09:46:47 G0010 Turla
Spyware VM-Ray 2022-12-21 11:31:30 2022-12-21 11:31:30
Keylogger VM-Ray 2022-12-21 11:31:30 2022-12-21 11:31:30

Tags

win.snake ekans snakehose

Sample information

Filenames
ff267549b8f842b37cdbfbfa8bda58e4569235b78175c1aa1e8944658da7f50d.exe
File type
PE32 executable (GUI) Intel 80386, for MS Windows
SHA-256
ff267549b8f842b37cdbfbfa8bda58e4569235b78175c1aa1e8944658da7f50d
First indexed
2022-12-21 11:12:47
Last updated
2026-09-24 06:47:10

Antivirus detections

EngineDetection
ALYacSpyware.AgentTesla
APEXMalicious
AVGWin32:PWSX-gen [Trj]
AhnLab-V3Trojan/Win.Generic.C4553829
AlibabaTrojanPSW:MSIL/Tnega.a7a6e469
Antiy-AVLTrojan[PSW]/MSIL.Agensla
ArcabitTrojan.Generic.D2383629
AvastWin32:PWSX-gen [Trj]
AviraTR/Kryptik.uyxcf
BitDefenderTrojan.GenericKD.37238313
BkavW32.AIDetectMalware.CS
CAT-QuickHealTrojan.Ghanarava.1671828142afa98a
CTXexe.trojan.msil
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
DeepInstinctMALICIOUS
DrWebTrojan.PackedNET.811
ESET-NOD32MSIL/Spy.Agent.AES
Elasticmalicious (high confidence)
EmsisoftTrojan.GenericKD.37238313 (B)
F-SecureTrojan.TR/Kryptik.uyxcf
FireEyeGeneric.mg.07e453e12b67dfb8
FortinetMSIL/Agent.DTR!tr.spy
GDataMSIL.Trojan-Spy.SnakeKeylogger.WZJ8XJ
GoogleDetected
IkarusTrojan.Inject
JiangminTrojan.Multi.bne
K7AntiVirusTrojan ( 0057f6661 )
K7GWTrojan ( 0057f6661 )
KasperskyHEUR:Trojan-PSW.MSIL.Agensla.gen
LionicTrojan.MSIL.Agensla.i!c
MalwarebytesMalware.AI.4266855979
MaxSecureTrojan.Malware.74499699.susgen
McAfeeAgentTesla-FCXV!07E453E12B67
McAfeeDReal Protect-LS!07E453E12B67
MicroWorld-eScanTrojan.GenericKD.37238313
MicrosoftTrojan:MSIL/AgentTesla.JAK!MTB
Paloaltogeneric.ml
PandaTrj/WLT.G
RisingTrojan.GenKryptik!8.AA55 (KTSE)
SangforInfostealer.Msil.AgentTesla.Vbu2
SentinelOneStatic AI - Malicious PE
SkyhighAgentTesla-FCXV!07E453E12B67
SophosTroj/Kryptik-ZW
SymantecTrojan.Gen.2
TencentMsil.Trojan-QQPass.QQRob.Cgow
TrendMicroTrojanSpy.MSIL.NEGASTEAL.DYSHPXV
TrendMicro-HouseCallTrojanSpy.MSIL.NEGASTEAL.DYSHPXV
VBA32TScope.Trojan.MSIL
VIPRETrojan.GenericKD.37238313
VaristW32/Trojan.PASM-8189
VirITTrojan.Win32.MSIL.CKJ
XcitiumMalware@#3gditygz9zppa
YandexTrojan.Igent.bWdNyU.2
ZillyaTrojan.Agensla.Win32.12991
ZonerTrojan.Win32.115166
huorongVirTool/MSIL.Obfuscator.xs
CAT-QuickHealTrojan.YakbeexMSIL.ZZ4
AlibabaTrojanPSW:MSIL/Tnega.cd9f0e92
CyrenW32/Trojan.PASM-8189
NANO-AntivirusTrojan.Win32.Agensla.ixmkxh
TencentMsil.Trojan-qqpass.Qqrob.Hyy
Ad-AwareTrojan.GenericKD.37238313
TACHYONTrojan/W32.DN-Agent.521216.H
SophosMal/Generic-S + Troj/Kryptik-ZW
ComodoMalware@#3gditygz9zppa
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Generic.hm
Antiy-AVLTrojan/Generic.ASMalwS.3434AE4
ViRobotTrojan.Win32.Z.Kryptik.521216.BL
ZoneAlarmHEUR:Trojan-PSW.MSIL.Agensla.gen
MicrosoftTrojan:MSIL/Tnega.BK!MTB
CynetMalicious (score: 100)
MAXmalware (ai score=100)
MalwarebytesTrojan.Downloader.MSIL
FortinetMSIL/Kryptik.A98A!tr
WebrootW32.Trojan.Gen