21850bb5d8df021e850e740c1899353f40af72f119f2cd71ad234e91c2ccb772
Classification: Malicious
21850bb5d8df021e850e740c1899353f40af72f119f2cd71ad234e91c2ccb772 is a trojan (application/x-dosexec). Detected by 57 antivirus engines.
Detection summary
- 57 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Intrusion sets: FIN7 (G0046)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Cyber Threat Alliance | 2026-10-10 10:10:36 | 2026-10-10 10:10:36 | malicious-activity | |
| Generic.Malware | Abuse.ch | 2021-05-18 14:45:53 | 2021-05-18 14:45:53 | malicious-activity | |
| FIN7 | Abuse.ch | 2021-05-18 14:45:53 | 2021-05-18 14:45:53 | malicious-activity | G0046 FIN7 |
Sample information
- Filenames
- 21850bb5d8df021e850e740c1899353f40af72f119f2cd71ad234e91c2ccb772.bin
- File type
- application/x-dosexec
- MD5
a0480fb3a1f94824ea5167cd6c01a074- SHA-1
552c13112f4f7c8b662af5600726ca4946a3ab3d- SHA-256
21850bb5d8df021e850e740c1899353f40af72f119f2cd71ad234e91c2ccb772- First indexed
- 2021-05-18 17:15:10
- Last updated
- 2026-09-03 03:53:15
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.Agent.DiceLoader |
| APEX | Malicious |
| AVG | Win32:Agent-BDFS [Trj] |
| AhnLab-V3 | Trojan/Win.Generic.R478838 |
| Alibaba | Trojan:Win64/DiceLoader.8bb5a147 |
| Antiy-AVL | HackTool/Win32.Inject |
| Arcabit | Trojan.Trojan.Ransomware.888 |
| Avast | Win32:Agent-BDFS [Trj] |
| Avira | TR/W32.Agent.BDFS |
| BitDefender | Gen:Variant.Trojan.Ransomware.888 |
| Bkav | W32.Malware.9E96DF8A |
| CTX | dll.trojan.diceloader |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Loader.777 |
| ESET-NOD32 | Win32/Agent.ACZO trojan |
| Elastic | Windows.Generic.Threat |
| Emsisoft | Gen:Variant.Trojan.Ransomware.888 (B) |
| F-Secure | Trojan.TR/W32.Agent.BDFS |
| Fortinet | W32/PossibleThreat |
| GData | Gen:Variant.Trojan.Ransomware.888 |
| Detected | |
| Gridinsoft | Trojan.Win64.DiceLoader.dd!s1 |
| Jiangmin | HackTool.Inject.ddb |
| K7AntiVirus | Hacktool ( 005d00021 ) |
| K7GW | Hacktool ( 005d00021 ) |
| Kaspersky | Trojan.Win64.Agentb.va |
| Lionic | Trojan.Win32.DiceLoader.4!c |
| Malwarebytes | Malware.AI.1003228812 |
| MaxSecure | Trojan.Malware.117198067.susgen |
| McAfeeD | ti!21850BB5D8DF |
| MicroWorld-eScan | Gen:Variant.Trojan.Ransomware.888 |
| Microsoft | Trojan:Win64/DiceLoader.KM!MTB |
| Paloalto | generic.ml |
| Panda | Trj/CI.A |
| Rising | Trojan.Agent!8.B1E (TFE:2:w35SnQRXjwU) |
| Sangfor | Suspicious.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | Downloader-FCRE!A0480FB3A1F9 |
| Sophos | Mal/Generic-S |
| Symantec | ML.Attribute.HighConfidence |
| Tencent | Win32.Trojan.Lizar.Rezt |
| TrellixENS | Downloader-FCRE!A0480FB3A1F9 |
| TrendMicro | TROJ_FRS.0NA103D826 |
| TrendMicro-HouseCall | TROJ_FRS.0NA103D826 |
| VBA32 | Trojan.Win64.Agentb |
| VIPRE | Gen:Variant.Trojan.Ransomware.888 |
| Varist | W64/Agent.GBN.gen!Eldorado |
| ViRobot | Trojan.Win64.S.DiceLoader.13647 |
| Webroot | W32.Trojan.Gen |
| Xcitium | Malware@#3m50zpvtkjfrd |
| Zillya | Trojan.Agent.Win64.7969 |
| alibabacloud | Trojan:Win/DiceLoader.A |
| huorong | Trojan/W64.Loader.b |
| tehtris | Generic.Malware |