MALICIOUS — 553304364a231098826212c9653d96d0a4f7ca448808a5372d47dcce4076b855.exe

MALICIOUS — 553304364a231098826212c9653d96d0a4f7ca448808a5372d47dcce4076b855.exe is a pe sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (81/100), attributed to the execute family. 4 of 53 detection engines flagged it, exhibiting 1 ATT&CK technique.

Identification

• SHA-256: 553304364a231098826212c9653d96d0a4f7ca448808a5372d47dcce4076b855
• SHA-1: 4b7fe1297aa8c28437de29002ce24578e8191543
• MD5: 065a654298fea56fd643d60ef83b3fd9
• imphash: f34d5f2d4577ed6d9ceec516c1f5a744
• ssdeep: 1536:NODylMTjy1HhweDCoO09b/DyKysAgc8v:NnMvy1BweDCoZ9b/fb
• TLSH: T1CB37C4DA25B90025C576EA62D610284FE0727C26CB25273547AFACBF2C60F37211767B
• Submitted as: 553304364a231098826212c9653d96d0a4f7ca448808a5372d47dcce4076b855.exe
• File type: pe · Size: 70656 bytes
• Verdict: malicious (81/100) · Family: execute

Source: MalwareBazaar · first seen 2026-07-26T00:00:00.000Z · SHA-256 verified

Detections (4 of 53 engines)

• capa (capabilities): execute via PowerShell
• Microsoft Defender: Trojan:MSIL/NjRat.AMAK!MTB
• Emsisoft (Emergency Kit): IL:Trojan.XWorm.1
• Kaspersky (KVRT): HEUR:Trojan.Win32.Generic

MITRE ATT&CK

• T1059.001

Why this verdict

The malicious score of 81/100 is the fusion of 3 weighted signals:

• Microsoft Defender flagged Trojan:MSIL/NjRat.AMAK!MTB (rule Trojan:MSIL/NjRat.AMAK!MTB) - engine signal, weight 0.55, confidence 0.85
• Emsisoft (Emergency Kit) flagged IL:Trojan.XWorm.1 (rule IL:Trojan.XWorm.1) - engine signal, weight 0.55, confidence 0.85
• execute via PowerShell (rule execute via PowerShell) - capa signal, weight 0.40, confidence 0.80

Dynamic analysis (windows)

1 behavior events · 0 ATT&CK techniques · 0 dropped files.

Runtime network

• none

More execute samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report