MALICIOUS — 8c765c3753c717318fe22d626d6734dd7522d90396103de0aa3373bdb3fe2290.bin

MALICIOUS — 8c765c3753c717318fe22d626d6734dd7522d90396103de0aa3373bdb3fe2290.bin is a unknown sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (76/100). 2 of 53 detection engines flagged it, exhibiting 2 ATT&CK techniques.

Identification

• SHA-256: 8c765c3753c717318fe22d626d6734dd7522d90396103de0aa3373bdb3fe2290
• SHA-1: f4b2fdd7c272660b0083ea0315f5f3bb7a5059e8
• MD5: 17cb292d7547aca7680a42e05c32b7b2
• ssdeep: 384:v7rfGPhTX1uW4WK9CYdFH/36kBULWTsT7TQ:TrfGNX1uW4WK9CYdFSkBULWTsT7TQ
• TLSH: T1872EA71BE7A8458F72A29FCE5A44387F59698CF710D4D39967A67B810806C13C21BBCC
• Submitted as: 8c765c3753c717318fe22d626d6734dd7522d90396103de0aa3373bdb3fe2290.bin
• File type: unknown · Size: 30053 bytes
• Verdict: malicious (76/100)

Source: MalShare · first seen 2026-09-16T11:32:34.751Z · SHA-256 verified

Detections (2 of 53 engines)

• capa (capabilities): capability:credential-access
• Emsisoft (Emergency Kit): Trojan.Agent.CXVF

MITRE ATT&CK

• T1555
• T1003

Why this verdict

The malicious score of 76/100 is the fusion of 3 weighted signals:

• Emsisoft (Emergency Kit) flagged Trojan.Agent.CXVF (rule Trojan.Agent.CXVF) - engine signal, weight 0.55, confidence 0.85
• access stored credentials (rule access stored credentials) - capa signal, weight 0.50, confidence 0.80
• capa (capabilities) flagged capability:credential-access (rule capability:credential-access) - engine signal, weight 0.35, confidence 0.70

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report