NR_Dinner 30282.xlsb

Classification: Malicious

NR_Dinner 30282.xlsb is a trojan (application/vnd.openxmlformats-officedo…). Detected by 34 antivirus engines. Linked to Dridex malware.

Detection summary

  • 34 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: DRIDEX (S0384)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Dridex Abuse.ch 2021-11-18 13:42:39 2021-11-18 13:42:39 malicious-activity S0384 Dridex

Sample information

Filenames
NR_Dinner 30282.xlsb
File type
application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
MD5
1b26e658ab5f34d9790bf28512374b86
SHA-1
fbd0a618b230fade95419534b3324921e39dc0ff
SHA-256
4256d5d1b3325408af8c2ea3f496e05d581bf1bfc45a08881f6f8d04fd26f60c
First indexed
2021-11-18 15:16:02
Last updated
2026-10-11 02:58:44

Antivirus detections

EngineDetection
ALYacTrojan.Agent.FRPA
AVGVBS:Malware-gen
AlibabaTrojanDownloader:Office97/Dridex.3c50d3d5
ArcabitTrojan.Agent.FRPA
AvastVBS:Malware-gen
AviraW97M/Agent.cqu
BitDefenderTrojan.Agent.FRPA
CTXxlsx.trojan.dridex
CynetMalicious (score: 99)
ESET-NOD32DOC/TrojanDropper.Agent.WR
EmsisoftTrojan.Agent.FRPA (B)
F-SecureMalware.XF/XBAgent.A
FortinetVBA/Agent.KB!tr
GDataTrojan.Agent.FRPA
GoogleDetected
IkarusTrojan-Downloader.XLM.Agent
KasperskyHEUR:Trojan.Script.Generic
LionicTrojan.MSExcel.Dridex.4!c
MicroWorld-eScanTrojan.Agent.FRPA
MicrosoftTrojanDownloader:O97M/Dridex!rfn
RisingTrojan.Generic/[email protected] (RDM.XLM:36LlAJ9QWnDmYVWpyNCjyA)
SangforMalware.Generic-XLM.Save.ma35
SkyhighX97M/Downloader.md
SymantecScr.MalMacro!gen3
TencentTrojan.MsOffice.Macro40.11017269
TrellixENSX97M/Downloader.md
TrendMicroTrojan.XF.DRIDEX.T
TrendMicro-HouseCallTrojan.XF.DRIDEX.T
VIPRETrojan.Agent.FRPA
VaristXF/Agent.AB.gen!Eldorado
XcitiumMalware@#2srppoap6pr6y
ZonerProbably Heur.W97ShellQ
alibabacloudTrojan[dropper]:MSOffice/Dridex.RE8PHU
huorongOMacro/Dropper.gs