MALICIOUS — c8f5154d2662341069adbac8a2447b7e409300a7683ec93a9ee3312f16ec2b26.bin

MALICIOUS — c8f5154d2662341069adbac8a2447b7e409300a7683ec93a9ee3312f16ec2b26.bin is a unknown sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (72/100), attributed to the Cryxos family. 3 of 51 detection engines flagged it.

Identification

• SHA-256: c8f5154d2662341069adbac8a2447b7e409300a7683ec93a9ee3312f16ec2b26
• SHA-1: dc614680e942d6a0149155894a9a225382b7a8c1
• MD5: 6af10dfccb26d759e72cf3e49c57f535
• ssdeep: 192:d+488X4APrUNQt6veqnc2/1kDzUD/T/RS4/82T/Ra4ZcH/SDIi+Sa98B:d+48sPAu6v1nZkDz0y4iPky8B
• TLSH: T15F5B7B3570AD9ACD2B1DDED6C0C49254EC98FE121D981F42A9B9CB405BB33763684E83
• Submitted as: c8f5154d2662341069adbac8a2447b7e409300a7683ec93a9ee3312f16ec2b26.bin
• File type: unknown · Size: 2263528 bytes
• Verdict: malicious (72/100) · Family: Cryxos

Source: MalShare · first seen 2026-07-31T07:26:47.087Z · SHA-256 verified

Detections (3 of 51 engines)

• Microsoft Defender: TrojanDownloader:JS/Remcos.AHB!MTB
• Emsisoft (Emergency Kit): JS:Trojan.Cryxos.16417
• Kaspersky (KVRT): HEUR:Trojan.Script.SAgent.gen

Why this verdict

The malicious score of 72/100 is the fusion of 2 weighted signals:

• Microsoft Defender flagged TrojanDownloader:JS/Remcos.AHB!MTB (rule TrojanDownloader:JS/Remcos.AHB!MTB) - engine signal, weight 0.55, confidence 0.85
• Emsisoft (Emergency Kit) flagged JS:Trojan.Cryxos.16417 (rule JS:Trojan.Cryxos.16417) - engine signal, weight 0.55, confidence 0.85

More Cryxos samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report