_0f9cf1cf8d641562053ce533aaa413754db88e60404cab6bbaa11f2b2491d542.fpx

Classification: Malicious

_0f9cf1cf8d641562053ce533aaa413754db88e60404cab6bbaa11f2b2491d542.fpx is a malicious file sample (Office document). Linked to Tsundere Botnet malware.

Detection summary

  • 0 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 2 contacted hosts
  • 3 DNS requests

MITRE ATT&CK associations

Malware families: TSUNDERE BOTNET (S9034)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Dindoor Triage 2026-03-18 16:17:58 2026-03-18 16:17:58 malicious-activity S9034 Tsundere Botnet
Generic Malware Hybrid-Analysis 2026-03-06 12:45:06 2026-03-06 12:45:06
Generic Malware Triage 2026-03-06 11:44:11 2026-03-06 11:44:11 malicious-activity

Tags

execution persistence privilege_escalation ransomware dindoor backdoor rat trojan

Sample information

Filenames
0f9cf1cf8d641562053ce533aaa413754db88e60404cab6bbaa11f2b2491d542.msi, 0f9cf1cf8d641562053ce533aaa413754db88e60404cab6bbaa11f2b2491d542.bin, _0f9cf1cf8d641562053ce533aaa413754db88e60404cab6bbaa11f2b2491d542.fpx
File type
Composite Document File V2 Document, Little Endian ...
MD5
8d8aa0be8f82d22deab96f96d9af34b8
SHA-1
42111d2ebcd42fa1fa7069560401db736c483776
SHA-256
0f9cf1cf8d641562053ce533aaa413754db88e60404cab6bbaa11f2b2491d542
SHA-512
6512ba572ff8e4d5a71f747f6a8c8560b70be2cfccfadab7a6b2463e0144aa6c2e084144d52c91f114c92328bdb4f51cefe74bf402759e95467da6d4fa92abe9
First indexed
2026-03-06 11:44:11
Last updated
2026-08-17 12:21:01

Network contacts

69.67.170.170 172.67.198.112

DNS requests

deno.com deno.land dl.deno.land