17291fc45dc342a6ce4309dd4b77cd094c564fad14c212bca827770daf7207d4
Classification: Malicious
17291fc45dc342a6ce4309dd4b77cd094c564fad14c212bca827770daf7207d4 is a malicious file sample. Linked to Ta505 activity. Detected by 55 antivirus engines.
Detection summary
- 55 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Intrusion sets: TA505 (G0092)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Ta505 | Maltiverse | 2023-04-11 04:13:42 | 2023-04-12 19:55:00 | malicious-activity | G0092 TA505 |
Tags
aptSample information
- SHA-256
17291fc45dc342a6ce4309dd4b77cd094c564fad14c212bca827770daf7207d4- First indexed
- 2023-04-12 19:55:00
- Last updated
- 2025-11-01 21:47:26
Antivirus detections
| Engine | Detection |
|---|---|
| Lionic | Trojan.Win32.DarkVNC.4!c |
| Elastic | malicious (high confidence) |
| MicroWorld-eScan | Gen:Variant.Lazy.285674 |
| FireEye | Gen:Variant.Lazy.285674 |
| CAT-QuickHeal | Backdoor.Darkvnc |
| McAfee | Artemis!A4E28AFC3642 |
| Malwarebytes | Malware.AI.2058780680 |
| Zillya | Trojan.Agent.Win32.3271331 |
| Sangfor | Backdoor.Win32.Darkvnc.Vd9s |
| K7AntiVirus | Trojan ( 0058ecdd1 ) |
| Alibaba | Backdoor:Win32/DarkVNC.3e1870d2 |
| K7GW | Trojan ( 0058ecdd1 ) |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Arcabit | Trojan.Lazy.D45BEA |
| Cyren | W32/Agent.FVI.gen!Eldorado |
| Symantec | ML.Attribute.HighConfidence |
| ESET-NOD32 | a variant of Win32/Agent.ADYK |
| APEX | Malicious |
| Paloalto | generic.ml |
| Cynet | Malicious (score: 100) |
| Kaspersky | HEUR:Backdoor.Win32.DarkVNC.gen |
| BitDefender | Gen:Variant.Lazy.285674 |
| NANO-Antivirus | Trojan.Win32.DarkVNC.jvihiq |
| Avast | Win32:TrojanX-gen [Trj] |
| Tencent | Malware.Win32.Gencirc.10be8a70 |
| Emsisoft | Gen:Variant.Lazy.285674 (B) |
| F-Secure | Trojan.TR/Agent.vqbre |
| DrWeb | BackDoor.Siggen2.4466 |
| VIPRE | Gen:Variant.Lazy.285674 |
| TrendMicro | TROJ_GEN.R002C0PDA23 |
| McAfee-GW-Edition | BehavesLike.Win32.Infected.nh |
| Sophos | Mal/Generic-S |
| Jiangmin | Backdoor.DarkVNC.dl |
| Webroot | W32.Trojan.Gen |
| Avira | TR/Agent.vqbre |
| Antiy-AVL | Trojan/Win32.Sabsik |
| Microsoft | Trojan:Win32/Casdet!rfn |
| ZoneAlarm | HEUR:Backdoor.Win32.DarkVNC.gen |
| GData | Gen:Variant.Lazy.285674 |
| Detected | |
| AhnLab-V3 | Trojan/Win.Generic.R561542 |
| BitDefenderTheta | AI:Packer.061476BD21 |
| ALYac | Backdoor.DarkVNC.Gen |
| MAX | malware (ai score=88) |
| VBA32 | Backdoor.DarkVNC |
| Cylance | unsafe |
| Panda | Trj/Genetic.gen |
| TrendMicro-HouseCall | TROJ_GEN.R002C0PDA23 |
| Rising | Trojan.Agent!8.B1E (TFE:5:9vze4VBI6vN) |
| Yandex | Trojan.Agent!f3nJXU+tZmY |
| Ikarus | Trojan.Win32.Agent |
| MaxSecure | Trojan.Malware.83762099.susgen |
| Fortinet | W32/Agent.ADYK!tr |
| AVG | Win32:TrojanX-gen [Trj] |
| DeepInstinct | MALICIOUS |