pops.works_manahet__2475ab4nu59ok.exe.malw

Classification: Malicious

pops.works_manahet__2475ab4nu59ok.exe.malw is a trojan (application/x-dosexec). Detected by 62 antivirus engines. Linked to Trickbot malware.

Detection summary

  • 62 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: TRICKBOT (S0266)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
TrickBot Abuse.ch 2020-06-16 23:05:53 2020-06-16 23:05:53 S0266 TrickBot

Sample information

Filenames
pops.works_manahet__2475ab4nu59ok.exe.malw
File type
application/x-dosexec
MD5
0277b72135fbcf416072997f48ae2222
SHA-1
7105521d2d25435951f9827c0951e783458a64ba
SHA-256
14e3c8fab9432035a27409f27aeafc7381cc773cf937b7b18d123e5e4007a275
First indexed
2020-06-18 19:08:33
Last updated
2026-10-16 05:47:41

Antivirus detections

EngineDetection
ALYacDump:Generic.ShellCode.RDI.Marte.1.BDC94A52
APEXMalicious
AVGWin32:BotX-gen [Trj]
AhnLab-V3Malware/Win32.Generic.C4129486
AlibabaTrojan:Win32/TrickBot.bde452e9
Antiy-AVLTrojan/Win32.Wacatac
ArcabitDump:Generic.ShellCode.RDI.Marte.1.BDC94A52
AvastWin32:BotX-gen [Trj]
AviraHEUR/AGEN.1361441
BitDefenderDump:Generic.ShellCode.RDI.Marte.1.BDC94A52
BkavW32.AIDetectMalware
CAT-QuickHealTrojan.Ghanarava.1729201554ae2222
CTXexe.trojan.kryptik
ClamAVWin.Malware.Emotetu-9877152-0
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
CynetMalicious (score: 99)
DeepInstinctMALICIOUS
DrWebTrojan.DownLoader33.55127
ESET-NOD32a variant of Win32/Kryptik.HHTC
Elasticmalicious (high confidence)
EmsisoftDump:Generic.ShellCode.RDI.Marte.1.BDC94A52 (B)
F-SecureHeuristic.HEUR/AGEN.1361441
FireEyeGeneric.mg.0277b72135fbcf41
FortinetW32/Emotet.CHWJ!tr
GDataDump:Generic.ShellCode.RDI.Marte.1.BDC94A52
GoogleDetected
GridinsoftTrojan.Win32.TrickBot.oa!s1
IkarusTrojan-Banker.TrickBot
JiangminTrojan.Zenpak.cdt
K7AntiVirusTrojan ( 0058ec6f1 )
K7GWTrojan ( 0058ec6f1 )
KasperskyHEUR:Trojan.Win32.Convagent.gen
Kingsoftmalware.kb.a.983
LionicTrojan.Win32.Dump.4!c
MaxSecureTrojan.Malware.73872809.susgen
McAfeeEmotet-FQU!0277B72135FB
McAfeeDReal Protect-LS!0277B72135FB
MicroWorld-eScanDump:Generic.ShellCode.RDI.Marte.1.BDC94A52
MicrosoftTrojan:Win32/Trickbot!pz
NANO-AntivirusTrojan.Win32.Kryptik.hlgyax
Paloaltogeneric.ml
PandaTrj/Genetic.gen
RisingTrojan.Kryptik!1.C89F (CLASSIC)
SUPERAntiSpywareTrojan.Agent/Gen-Downloader
SangforTrojan.Win32.Save.a
SentinelOneStatic AI - Suspicious PE
SkyhighEmotet-FQU!0277B72135FB
SophosTroj/Agent-BEUD
SymantecTrojan.Trickybot
TencentTrojan.Win32.Convagent.haa
Trapminesuspicious.low.ml.score
VBA32Trojan.Zenpak
VIPREDump:Generic.ShellCode.RDI.Marte.1.BDC94A52
VaristW32/Emotet.AMF.gen!Eldorado
ViRobotTrojan.Win32.Trickbot.496342
VirITTrojan.Win32.Dnldr33.DDOH
WebrootW32.Trojan.Gen
XcitiumMalware@#1z3st3926bkfx
YandexTrojan.Agent!1CUrJVwFLrA
ZillyaTrojan.Kryptik.Win32.2047311
huorongTrojan/Emotet.cu