3d0fd0444a9e295135ecfdc8c87ddc6dcdff63969c745e0218469332aef18dfe
Classification: Malicious
3d0fd0444a9e295135ecfdc8c87ddc6dcdff63969c745e0218469332aef18dfe is a trojan. Detected by 69 antivirus engines. Linked to Guloader malware.
Detection summary
- 69 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: GULOADER (S0561)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Guloader | Cyber Threat Alliance | 2026-10-10 15:32:48 | 2026-10-10 15:32:48 | malicious-activity | S0561 GuLoader |
| Common Raven | Maltiverse | 2023-02-05 04:18:59 | 2023-02-06 02:06:31 | malicious-activity |
Tags
aptSample information
- MD5
4dcc8b1dd2b3895dd93526c6c9f3ac47- SHA-1
36dbd2bd1090b5eb1acbf44663bc7ebe9a82a66c- SHA-256
3d0fd0444a9e295135ecfdc8c87ddc6dcdff63969c745e0218469332aef18dfe- First indexed
- 2023-02-06 02:06:31
- Last updated
- 2025-09-30 05:04:53
Antivirus detections
| Engine | Detection |
|---|---|
| AVG | Win32:Evo-gen [Trj] |
| Elastic | malicious (high confidence) |
| DrWeb | Trojan.Inject4.50702 |
| MicroWorld-eScan | Trojan.GenericKD.64839311 |
| FireEye | Trojan.GenericKD.64839311 |
| CAT-QuickHeal | Trojan.NSIS |
| McAfee | Artemis!4DCC8B1DD2B3 |
| Cylance | Unsafe |
| Zillya | Trojan.Guloader.Win32.259 |
| K7AntiVirus | Trojan ( 0059d7a21 ) |
| Alibaba | Trojan:Win32/CryptInject.0970cd2b |
| K7GW | Trojan ( 0059d7a21 ) |
| Cyren | W32/ABRisk.YXHX-1116 |
| Symantec | Trojan Horse |
| ESET-NOD32 | NSIS/Injector.BFI |
| Cynet | Malicious (score: 100) |
| Paloalto | generic.ml |
| Kaspersky | HEUR:Trojan.NSIS.Agent.gen |
| BitDefender | Trojan.GenericKD.64839311 |
| NANO-Antivirus | Trojan.Win32.Guloader.jugmxu |
| Avast | Win32:Evo-gen [Trj] |
| Tencent | Win32.Trojan.FalseSign.Qgil |
| Emsisoft | Trojan.GenericKD.64839311 (B) |
| F-Secure | Heuristic.HEUR/AGEN.1252583 |
| VIPRE | Trojan.GenericKD.64839311 |
| TrendMicro | TROJ_FRS.VSNTA623 |
| McAfee-GW-Edition | Artemis!Trojan |
| Sophos | Mal/Generic-S |
| GData | Trojan.GenericKD.64839311 |
| Avira | HEUR/AGEN.1252583 |
| MAX | malware (ai score=80) |
| Antiy-AVL | Trojan/NSIS.Injector |
| Arcabit | Trojan.Generic.D3DD5E8F |
| ZoneAlarm | HEUR:Trojan.NSIS.Agent.gen |
| Microsoft | Trojan:Win32/CryptInject!MSR |
| Detected | |
| AhnLab-V3 | Downloader/Win.GuLoader.C5355799 |
| ALYac | Trojan.Agent.GuLoader |
| Malwarebytes | Malware.AI.3930718917 |
| TrendMicro-HouseCall | TROJ_FRS.VSNTA623 |
| Fortinet | NSIS/Injector.9319!tr |
| Panda | Trj/Chgt.AD |
| Alibaba | Trojan:Win32/CryptInject.41d83eaa |
| Antiy-AVL | Trojan[APT]/NSIS.Opera1er |
| Avira | HEUR/AGEN.1333743 |
| Bkav | W32.AIDetectMalware |
| CAT-QuickHeal | Trojan.Ghanarava.1734243128f3ac47 |
| CTX | exe.trojan.nsis |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cynet | Malicious (score: 99) |
| DeepInstinct | MALICIOUS |
| F-Secure | Heuristic.HEUR/AGEN.1333743 |
| Fortinet | NSIS/Injector.B9AB!tr |
| Ikarus | Trojan.NSIS.Injector |
| Lionic | Trojan.Win32.GuLoader.4!c |
| MaxSecure | Trojan.Malware.428893934.susgen |
| McAfeeD | ti!3D0FD0444A9E |
| Sangfor | Trojan.Win32.Injector.Vfn2 |
| Skyhigh | Generic Trojan.tz |
| TrellixENS | Generic Trojan.tz |
| TrendMicro | TROJ_GEN.R002C0DC725 |
| TrendMicro-HouseCall | TROJ_GEN.R002C0DC725 |
| VBA32 | Trojan.NSIS.Agent |
| Varist | W32/ABTrojan.YXHX-1116 |
| ViRobot | Trojan.Win.Z.Injector.1134016 |
| VirIT | Trojan.Win32.NSISInjT.EEED |
| Xcitium | Malware@#3rccosq87jbks |
| alibabacloud | Trojan:Win/CryptInject.Gen |
| huorong | Trojan/Injector.aqz |