MALICIOUS — 81194f25022bfa00144df346df67983f01ee553b075d83a3ff7c80d251b49ca5

MALICIOUS — 81194f25022bfa00144df346df67983f01ee553b075d83a3ff7c80d251b49ca5 is a pe sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (97/100), attributed to the Prepscram family. 6 of 52 detection engines flagged it.

Identification

• SHA-256: 81194f25022bfa00144df346df67983f01ee553b075d83a3ff7c80d251b49ca5
• SHA-1: 3af8f1cedfdb1a6adaab08925daa07f9b9a04677
• MD5: 735f9c7614191f001dd820392c876619
• imphash: f1a539a5b71ad53ac586f053145f08ec
• File type: pe · Size: 3656104 bytes
• Verdict: malicious (97/100) · Family: Prepscram

Detections (6 of 52 engines)

• MalwareAnalyser heuristics (entropy/packer): UPX
• ClamAV (daily): Win.Malware.Zusy-9957983-0
• Detect It Easy (packer/type): DIE:UPX
• Microsoft Defender: Trojan:Win32/Prepscram!pz
• Emsisoft (Emergency Kit): Gen:Variant.Rootkit.25
• Kaspersky (KVRT): Trojan.Win32.Agent.neyndy

Embedded domains

• t.ai

File paths

• K:\n=&
• E:\:V
• X:\X,
• k:\x{r

More Prepscram samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report