charge.12.20.doc

Classification: Malicious

charge.12.20.doc is a trojan (application/vnd.openxmlformats-officedo…). Detected by 50 antivirus engines. Linked to Icedid malware.

Detection summary

  • 50 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: ICEDID (S0483)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
IcedID Abuse.ch 2020-12-10 01:49:51 2020-12-10 01:49:51 malicious-activity S0483 IcedID
Generic.Malware Abuse.ch 2020-12-10 01:49:51 2020-12-10 01:49:51 malicious-activity

Sample information

Filenames
charge.12.20.doc
File type
application/vnd.openxmlformats-officedocument.wordprocessingml.document
MD5
4757838ce415a0ab23282cb608ef45d5
SHA-1
fa5ee9b84f35b4dbb8fe426684aedfaaca979134
SHA-256
40a2ad9eb3f20c7d4378fe86fca0a18f89230aa06d73a99ae2f08a32eccebede
First indexed
2020-12-10 03:15:10
Last updated
2026-09-28 02:09:56

Antivirus detections

EngineDetection
Elasticmalicious (high confidence)
CyrenPP97M/Agent.MX.gen!Eldorado
NANO-AntivirusTrojan.Ole2.Vbs-heuristic.druvzi
TencentHeur.Macro.Generic.b.b8851fae
TrendMicroHEUR_VBA.O2
McAfee-GW-EditionBehavesLike.Downloader.nc
IkarusTrojan-Downloader.VBA.Agent
JiangminTrojan.BAT.Small.a
ArcabitHEUR.VBA.CG.1
TACHYONSuspicious/WOX.Obfus.Gen.1
ZonerProbably Heur.W97Obfuscated
YandexTrojan.AvsMofer.bS58KH
SentinelOneStatic AI - Malicious OPENXML
Qihoo-360virus.office.obfuscated.1
ALYacTrojan.Downloader.DOC.Gen
AVGOther:Malware-gen [Trj]
AlibabaTrojanDownloader:VBA/MalDoc.ali1000101
Antiy-AVLTrojan[Downloader]/MSOffice.Agent
AvastOther:Malware-gen [Trj]
AviraHEUR/Macro.Downloader.MRABC.Gen
BitDefenderVB:Trojan.Valyria.3465
CAT-QuickHealO97M.Downloader.40514
CTXdocx.trojan.generic
ClamAVDoc.Dropper.Generic-9823794-0
CynetMalicious (score: 99)
ESET-NOD32VBA/TrojanDropper.Agent.BRP trojan
EmsisoftVB:Trojan.Valyria.3465 (B)
F-SecureHeuristic.HEUR/Macro.Downloader.MRABC.Gen
FortinetVBA/Agent.BRW!tr
GDataVB:Trojan.Valyria.3465
GoogleHighly Suspicious
KasperskyUDS:DangerousObject.Multi.Generic
LionicTrojan.MSWord.Generic.4!c
MicroWorld-eScanVB:Trojan.Valyria.3465
MicrosoftTrojanDownloader:O97M/IcedID!rfn
RisingMalware.Obfus/[email protected] (VBA)
SangforTrojan.Generic-Macro.Save.e2295e1f
SkyhighW97M/Downloader.diw
SymantecTrojan.Gen.NPE
TACHYONSuspicious/WOX.Obfus.Gen
TencentMac.Trojan.Macro.Umhl
TrellixENSW97M/Downloader.diw
TrendMicroTrojan.W97M.ICEDID.SMAD
TrendMicro-HouseCallTrojan.W97M.ICEDID.SMAD
VBA32TrojanDownloader.O97M.Aptdrop
VIPREVB:Trojan.Valyria.3465
VaristPP97M/Agent.MX.gen!Eldorado
VirITOffice.VBA_Macro_Heur
alibabacloudTrojan:MSOffice/Obfuscated.au
huorongOMacro/Obfuscated.au