Classification: Malicious
KakaoTa2258.exe is a trojan (Windows executable). Detected by 36 antivirus engines. 5 sightings from Hybrid-Analysis and Triage, last seen 2026-04-14.
Detection summary
- 36 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Generic Malware |
Hybrid-Analysis |
2026-03-10 02:45:05 |
2026-04-14 08:45:06 |
|
|
| Generic Malware |
Triage |
2026-04-09 01:03:47 |
2026-04-09 01:03:47 |
malicious-activity
|
|
Tags
evasive
defense_evasion
discovery
persistence
themida
trojan
upx
plugx
Sample information
- Filenames
- KakaoTa2258.exe, ffc0330e374d6faa2c5ffc9024034039cda3af8278bef5d1bf26243c93750b06
- File type
- PE32 executable for MS Windows 5.01 (GUI), Intel i ...
- MD5
0ab84f52d043f7a7af54bd4df0331d64- SHA-1
c4fab3a85ffb8b733c72497c21b52c6fb2e2653f- SHA-256
ffc0330e374d6faa2c5ffc9024034039cda3af8278bef5d1bf26243c93750b06- First indexed
- 2026-03-10 01:46:10
- Last updated
- 2026-06-20 01:13:45
Antivirus detections
| Engine | Detection |
|---|
| ALYac | Trojan.Dropper.Dapato |
| AVG | Win32:Malware-gen |
| AhnLab-V3 | Dropper/Win.Agent.R763698 |
| Alibaba | TrojanDropper:Win32/Dapato.3290983d |
| Arcabit | Trojan.NSISX.Spy.Gen.1 [many] |
| Avast | Win32:Malware-gen |
| BitDefender | Trojan.NSISX.Spy.Gen.1 |
| CTX | exe.trojan.dapato |
| Cylance | Unsafe |
| DeepInstinct | MALICIOUS |
| ESET-NOD32 | NSIS/TrojanDropper.Agent.FH trojan |
| Emsisoft | Trojan.NSISX.Spy.Gen.1 (B) |
| Fortinet | NSIS/Agent.FE!tr |
| GData | NSIS.Application.Crypted.C |
| Google | Detected |
| Gridinsoft | Trojan.Win32.Agent.oa!s1 |
| K7AntiVirus | Trojan ( 0061db901 ) |
| K7GW | Trojan ( 0061db901 ) |
| Kaspersky | HEUR:Trojan-Dropper.Win32.Dapato.gen |
| Lionic | Trojan.Win32.Dapato.b!c |
| Malwarebytes | Malware.AI.4169041493 |
| McAfeeD | ti!FFC0330E374D |
| Microsoft | Trojan:Win32/Wacatac.B!ml |
| Paloalto | generic.ml |
| Rising | Dropper.Dapato!8.2A2 (CLOUD) |
| Sangfor | Dropper.Win32.Agent.V3qj |
| Skyhigh | Artemis |
| Sophos | Mal/Generic-S |
| Symantec | Trojan.Gen.MBT |
| Tencent | Win32.Trojan.FalseSign.Cgow |
| Trapmine | malicious.moderate.ml.score |
| VIPRE | Trojan.NSISX.Spy.Gen.1 |
| Varist | W32/ABTrojan.CVJW-6440 |
| ViRobot | Dropper.S.Agent.146587543 |
| Webroot | Win.Trojan.Gen |
| alibabacloud | Trojan[dropper]:Win/Dapato.gyf |