MALICIOUS — dc42da3571e4f907f456b2edb0b0ce4b22a66adc2f2c4d006b0c40ccdf69df77.exe
MALICIOUS — dc42da3571e4f907f456b2edb0b0ce4b22a66adc2f2c4d006b0c40ccdf69df77.exe is a pe sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (90/100). 5 of 55 detection engines flagged it.
Identification
- SHA-256:
dc42da3571e4f907f456b2edb0b0ce4b22a66adc2f2c4d006b0c40ccdf69df77 - SHA-1:
0987466ea2c57cd3b520ef025ed97ece71622ff3 - MD5:
eb9656a9ac3dffcfc1677194a67a0279 - imphash:
f34d5f2d4577ed6d9ceec516c1f5a744 - ssdeep:
24576:BSpU6nePRa5SDP4iySRZgstup1ytrdj+Ati/:f45U4BotiaJ+c - TLSH:
T1AA50029E757C8C01D8FB90203E848AAC64A123D728A494CBDF32748417DEE775879DB9 - Submitted as: dc42da3571e4f907f456b2edb0b0ce4b22a66adc2f2c4d006b0c40ccdf69df77.exe
- File type: pe · Size: 798208 bytes
- Verdict: malicious (90/100)
Source: MalwareBazaar · first seen 2026-08-02T00:00:00.000Z · SHA-256 verified
Detections (5 of 55 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-sections:.text
- Hash: abuse.ch ThreatFox: known-malicious-hash
- Microsoft Defender: Trojan:Win32/Egairtigado!rfn
- Emsisoft (Emergency Kit): Trojan.GenericKD.81010459
- Kaspersky (KVRT): HEUR:Backdoor.MSIL.XWorm.gen
Why this verdict
The malicious score of 90/100 is the fusion of 3 weighted signals:
- Hash: abuse.ch ThreatFox flagged known-malicious-hash (rule
known-malicious-hash) - engine signal, weight 0.90, confidence 0.95 - Embedded network infrastructure: 8.4.2.0 - static signal, weight 0.35, confidence 0.60
- Packing/obfuscation: high-entropy-sections:.text - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded IP addresses
- 8.4.2.0
File paths
- C:\Users\Administrator\Desktop\Client\Temp\HaARjsgmTe\src\obj\Debug\OSFm.pdb
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report