Classification: Malicious
stux3.dll is a worm (application/x-dosexec). Detected by 61 antivirus engines. 3 sightings from Triage and MalwareBazaar Abuse.ch, last seen 2026-08-21.
Detection summary
- 61 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Stuxnet |
Triage |
2026-05-07 22:11:54 |
2026-08-21 22:11:43 |
malicious-activity
|
|
| Generic.Malware |
MalwareBazaar Abuse.ch |
2025-03-06 22:26:14 |
2025-03-06 22:26:14 |
malicious-activity
|
|
Tags
stuxnet
backdoor
discovery
Sample information
- Filenames
- 0e21f85809123aacf5fb0cf20e628cb02b14d2536298237f98a501d5fd16b373.dll, stux3.dll
- File type
- application/x-dosexec
- MD5
22154b113327f1c3a399d4cb19610a6f- SHA-1
fed3575c7840f916f11197d9df11f6822041c74d- SHA-256
0e21f85809123aacf5fb0cf20e628cb02b14d2536298237f98a501d5fd16b373- First indexed
- 2025-03-06 23:27:19
- Last updated
- 2026-08-21 22:56:57
Antivirus detections
| Engine | Detection |
|---|
| ALYac | Gen:Variant.Zusy.572070 |
| AVG | Win32:Duqu-F [Rtk] |
| AhnLab-V3 | Worm/Win.Stuxnet.C5290979 |
| Alibaba | Worm:Win32/Stuxnet.46773930 |
| Antiy-AVL | Worm/Win32.Stuxnet |
| Arcabit | Trojan.Zusy.D8BAA6 |
| Avast | Win32:Duqu-F [Rtk] |
| Avira | TR/Spy.Gen |
| BitDefender | Gen:Variant.Zusy.572070 |
| Bkav | W32.AIDetectMalware |
| CAT-QuickHeal | Worm.Stuxnet.B4 |
| CTX | dll.unknown.zusy |
| ClamAV | Win.Trojan.Agent-229176 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 99) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Stuxnet.1 |
| ESET-NOD32 | Win32/Stuxnet.A |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Variant.Zusy.572070 (B) |
| F-Secure | Trojan.TR/Spy.Gen |
| FireEye | Generic.mg.22154b113327f1c3 |
| Fortinet | W32/Stuxnet.B!tr |
| GData | Gen:Variant.Zusy.572070 |
| Google | Detected |
| Gridinsoft | Trojan.Win32.Downloader.oa!s1 |
| Ikarus | Trojan.Win32.Stuxnet |
| Jiangmin | TrojanDropper.Stuxnet.b |
| K7AntiVirus | Trojan ( 0017fd821 ) |
| K7GW | Trojan ( 0017fd821 ) |
| Kaspersky | Worm.Win32.Stuxnet.b |
| Kingsoft | Win32.Worm.Stuxnet.b |
| Lionic | Worm.Win32.Stuxnet.o!c |
| Malwarebytes | Stuxnet.Worm.Spreader.DDS |
| McAfee | Stuxnet.a |
| McAfeeD | ti!0E21F8580912 |
| MicroWorld-eScan | Gen:Variant.Zusy.572070 |
| Microsoft | Trojan:Win32/Stuxnet.E |
| NANO-Antivirus | Trojan.Win32.Stuxnet.bufnr |
| Panda | Trj/CI.A |
| Rising | Worm.Stuxnet!1.103AC (CLASSIC) |
| SUPERAntiSpyware | Worm.Stuxnet/Variant |
| Skyhigh | Stuxnet.a |
| Sophos | Troj/Stuxnet-C |
| Symantec | W32.Stuxnet |
| Tencent | Malware.Win32.Gencirc.10b367ea |
| TrendMicro | WORM_STUXNET.SM |
| TrendMicro-HouseCall | WORM_STUXNET.SM |
| VBA32 | Worm.Stuxnet |
| VIPRE | Gen:Variant.Zusy.572070 |
| Varist | W32/Stuxnet.XQKX-9030 |
| ViRobot | Dropper.Stuxnet.25720 |
| VirIT | Trojan.Win32.Stuxnet.A |
| Xcitium | Worm.Win32.Stuxnet.A@222lpi |
| Yandex | Worm.Stuxnet!XexObuBqDAI |
| Zillya | Worm.Stuxnet.Win32.599 |
| alibabacloud | Worm:Win/Stuxnet.29434611 |
| huorong | Worm/Stuxnet |
| tehtris | Generic.Malware |
| CrowdStrike | win/malicious_confidence_70% (D) |