493eee2c55810201557ef0e5d134ca0d9569f25ae732df139bb0cb3d1478257f

Classification: Malicious

493eee2c55810201557ef0e5d134ca0d9569f25ae732df139bb0cb3d1478257f is a malicious file sample. Linked to Turla, Oilrig activity.

Detection summary

  • 32 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: TURLA (G0010) OILRIG (G0049)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Turla Maltiverse 2023-03-03 04:26:37 2023-03-04 19:42:06 malicious-activity G0010 Turla
OilRig Maltiverse 2023-03-03 04:26:38 2023-03-04 19:41:51 malicious-activity G0049 OilRig

Tags

apt apt34

Sample information

SHA-256
493eee2c55810201557ef0e5d134ca0d9569f25ae732df139bb0cb3d1478257f
First indexed
2023-03-04 19:41:51
Last updated
2023-03-04 19:42:07

Antivirus detections

EngineDetection
LionicTrojan.Script.Generic.4!c
ClamAVWin.Trojan.Waterbug-6999000-0
FireEyeVB:Trojan.Valyria.2744
McAfeeVBS/Downloader.lo
K7AntiVirusTrojan ( 0001140e1 )
K7GWTrojan ( 0001140e1 )
CyrenVBS/Turla.A
SymantecTrojan Horse
ESET-NOD32VBS/Agent.CB
TrendMicro-HouseCallTrojan.VBS.TURLA.AA
CynetMalicious (score: 99)
KasperskyTrojan.VBS.Turla.b
BitDefenderVB:Trojan.Valyria.2744
NANO-AntivirusTrojan.Script.Vbs-heuristic.druvzi
MicroWorld-eScanVB:Trojan.Valyria.2744
Ad-AwareVB:Trojan.Valyria.2744
F-SecureMalware.VBS/Agent.TO
VIPREVB:Trojan.Valyria.2744
TrendMicroTrojan.VBS.TURLA.AA
McAfee-GW-EditionBehavesLike.VBS.Backdoor.zp
EmsisoftVB:Trojan.Valyria.2744 (B)
IkarusTrojan.VBS.Agent
GDataVB:Trojan.Valyria.2744
AviraVBS/Agent.TO
Antiy-AVLTrojan/Win32.Casdet
ArcabitVB:Trojan.Valyria.DAB8
ZoneAlarmTrojan.VBS.Turla.b
MicrosoftTrojan:VBS/Rakebyms
GoogleDetected
ALYacTrojan.Script.Agent
MAXmalware (ai score=99)
FortinetVBS/Wbug.DC0C!tr