127839.xls.dll
Classification: Malicious
127839.xls.dll is a trojan (application/x-dosexec). Detected by 8 antivirus engines. Linked to Bazar malware. 2 sightings, last seen 2022-01-24.
Detection summary
- 8 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: BAZAR (S0534)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| BazaLoader | MalwareBazaar Abuse.ch | 2022-01-24 20:45:18 | 2022-01-24 20:45:18 | malicious-activity | S0534 Bazar |
| Generic.Malware | MalwareBazaar Abuse.ch | 2022-01-24 20:45:18 | 2022-01-24 20:45:18 | malicious-activity |
Sample information
- Filenames
- 127839.xls.dll
- File type
- application/x-dosexec
- MD5
c29dc151fcd638fe2ddc814b869b39b7- SHA-1
949974b10b64eaf21f88dfee55070ae65e1825a1- SHA-256
09c6f8070ebacdee9e649748922e5a5b100ac8723b6bf46467ea7a6ca7443523- First indexed
- 2022-01-24 22:15:09
- Last updated
- 2026-05-09 14:57:25
Antivirus detections
| Engine | Detection |
|---|---|
| Elastic | malicious (high confidence) |
| McAfee | Artemis!C29DC151FCD6 |
| ESET-NOD32 | a variant of Win64/Kryptik.CVX |
| Kaspersky | UDS:Trojan.Win64.Kryplod |
| McAfee-GW-Edition | Artemis!Trojan |
| Sophos | Generic ML PUA (PUA) |
| Microsoft | Trojan:Win32/Sabsik.FL.B!ml |
| Cynet | Malicious (score: 100) |