Print-doc-28Jan.exe

Classification: Malicious

Print-doc-28Jan.exe is a trojan (application/x-dosexec, 487.0 KB). Flagged by 5% of antivirus engines (55 detections). Linked to Bazar malware.

Detection summary

  • 55 antivirus detections (5% detection ratio)
  • 0 IDS alerts
  • 2 processes observed
  • 1 contacted hosts
  • 5 DNS requests

MITRE ATT&CK associations

Malware families: BAZAR (S0534)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
BazaLoader Abuse.ch 2021-01-29 15:13:00 2021-01-29 15:13:00 malicious-activity S0534 Bazar
Malware.Generic Hybrid-Analysis 2021-01-28 21:00:20 2021-01-28 21:00:20

Sample information

Filenames
1d921a846347be4c8cefbbf0449a40710408ecccf5cbbf99a0f8e41acb78881e, Print-doc-28Jan.exe
File type
application/x-dosexec
Size
498680 bytes
MD5
50ee07267cfec90541f3d8e1a35fec5a
SHA-1
976e320e858e4f596cdd056b187a85a894a95bc7
SHA-256
1d921a846347be4c8cefbbf0449a40710408ecccf5cbbf99a0f8e41acb78881e
First indexed
2021-01-28 21:00:20
Last updated
2026-09-06 00:54:13

Antivirus detections

EngineDetection
APEXMalicious
CynetMalicious (score: 100)
FireEyeGeneric.mg.50ee07267cfec905
MicrosoftTrojan:Win64/Bazarldr.BM!MSR
ALYacTrojan.Agent.Bazar
AVGWin64:DangerousSig [Trj]
AhnLab-V3Malware/Gen.RL_Reputation.R364647
AlibabaTrojan:Win64/Bazarldr.91ece7fd
Antiy-AVLTrojan/Win32.Zenpak
ArcabitTrojan.Nadrac.35
AvastWin64:DangerousSig [Trj]
AviraTR/Kryptik.bzxug
BitDefenderGen:Variant.Nadrac.35
CAT-QuickHealTrojan.Ghanarava.17281760615fec5a
CTXexe.trojan.kryptik
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
DeepInstinctMALICIOUS
DrWebBackDoor.Bazar.56
ESET-NOD32a variant of Win64/Kryptik.CGA
Elasticmalicious (high confidence)
EmsisoftMalCert-S.DU (A)
F-SecureTrojan.TR/Kryptik.bzxug
FortinetW32/Bazar.54!tr
GDataGen:Variant.Nadrac.35
GoogleDetected
GridinsoftTrojan.Win64.Kryptik.oa!s1
IkarusTrojan.Win64.Crypt
JiangminTrojan.Zenpak.gdf
K7AntiVirusTrojan ( 00576f8c1 )
K7GWTrojan ( 00576f8c1 )
KasperskyHEUR:Trojan.Win32.Zenpak.vho
Kingsoftmalware.kb.a.711
LionicTrojan.Win32.Zenpak.4!c
MalwarebytesCrypt.Trojan.MSIL.DDS
MaxSecureTrojan.Malware.74649578.susgen
McAfeePWS-FCVU!50EE07267CFE
McAfeeDti!1D921A846347
MicroWorld-eScanGen:Variant.Nadrac.35
Paloaltogeneric.ml
PandaTrj/CI.A
RisingTrojan.MalCert!1.D1EE (CLASSIC)
SkyhighPWS-FCVU!50EE07267CFE
SophosTroj/Bazarldr-A
SymantecML.Attribute.HighConfidence
TencentMalware.Win32.Gencirc.10bc0244
TrendMicroTrojan.Win64.BAZALOADER.SMTH
TrendMicro-HouseCallTrojan.Win64.BAZALOADER.SMTH
VBA32Trojan.Zenpak
VIPREGen:Variant.Nadrac.35
VaristW64/Kryptik.AYW
XcitiumMalware@#2ypwen4wn1qf
ZillyaTrojan.Kryptik.Win64.10432
alibabacloudTrojan:Win/Bazarldr.B
huorongTrojan/W64.Bazar.b

Network contacts

142.202.191.151

DNS requests

crl.identrust.com evcscasha2.ocsp-certum.com insideoutexprescarwash.com r3.o.lencr.org subca.ocsp-certum.com

Process list

NameCommand line
Print-doc-28Jan.exe
cmd.exe"cmd"