Classification: Malicious
load.ocx is a trojan (Windows executable, 200.5 KB). Flagged by 58% of antivirus engines (41 detections). Linked to Pay2Key malware.
Detection summary
- 41 antivirus detections (58% detection ratio)
- 0 IDS alerts
- 1 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Cobalt |
Cyber Threat Alliance |
2026-10-14 15:55:11 |
2026-10-14 15:55:11 |
malicious-activity
|
S0556 Pay2Key
|
| Backdoor.Agent |
Hybrid-Analysis |
2020-05-02 11:45:15 |
2020-05-02 11:45:15 |
|
|
Sample information
- Filenames
- load.ocx
- File type
- PE32 executable (DLL) (console) Intel 80386, for M ...
- Size
- 205312 bytes
- MD5
fcce335ad11f4e568e6fe23ae766b187
- SHA-1
976da2e8bdd698d974d38d01593897ca64946d92
- SHA-256
1820244e54dbb87ea21f6f1df15c3f255bfe3dd36db41fbf2f2e1f742a515063
- First indexed
- 2020-05-02 11:45:15
- Last updated
- 2020-05-02 11:45:15
Antivirus detections
| Engine | Detection |
| MicroWorld-eScan | Trojan.GenericKD.33589123 |
| VBA32 | Adware.Presenoker |
| CAT-QuickHeal | Backdoor.Agent |
| McAfee | Artemis!FCCE335AD11F |
| Cylance | Unsafe |
| VIPRE | Trojan.Win32.Generic!BT |
| K7AntiVirus | Trojan ( 00563d011 ) |
| Alibaba | Backdoor:Win32/Skidobot.8cded4e1 |
| K7GW | Trojan ( 00563d011 ) |
| Arcabit | Trojan.Generic.D2008783 |
| Symantec | ML.Attribute.HighConfidence |
| APEX | Malicious |
| Avast | Win32:Trojan-gen |
| Kaspersky | Backdoor.Win32.Agent.mytvbu |
| BitDefender | Trojan.GenericKD.33589123 |
| Rising | Backdoor.Agent!8.C5D (CLOUD) |
| Endgame | malicious (high confidence) |
| Emsisoft | Trojan.GenericKD.33589123 (B) |
| F-Secure | Trojan.TR/Agent.whnhm |
| Zillya | Trojan.Agent.Win32.1309238 |
| TrendMicro | Trojan.Win32.COBALT.AD |
| McAfee-GW-Edition | BehavesLike.Win32.Dropper.dh |
| Sophos | Mal/Generic-S |
| Cyren | W32/Trojan.DTUV-2745 |
| Avira | TR/Agent.whnhm |
| Fortinet | W32/Agent.ABRV!tr |
| Microsoft | Trojan:Win32/Occamy.C |
| AegisLab | Trojan.Multi.Generic.4!c |
| ZoneAlarm | Backdoor.Win32.Agent.mytvbu |
| BitDefenderTheta | Gen:NN.ZedlaF.34106.my8@aWQyLio |
| MAX | malware (ai score=81) |
| Ad-Aware | Trojan.GenericKD.33589123 |
| ESET-NOD32 | a variant of Win32/Agent.ABRV.gen |
| TrendMicro-HouseCall | Trojan.Win32.COBALT.AD |
| Tencent | Win32.Backdoor.Agent.Ehic |
| Ikarus | Trojan.Win32.Agent |
| GData | Trojan.GenericKD.33589123 |
| MaxSecure | Trojan.Malware.1728101.susgen |
| AVG | Win32:Trojan-gen |
| Panda | Trj/GdSda.A |
| Qihoo-360 | Win32/Backdoor.12d |
Process list
| Name | Command line |
| rundll32.exe | "C:\load.ocx.dll",#1 |