37f9b131926abb483d407fd4d3058d0efe1ac7cf88f9964cf0e6ad7502dbc769f6e7367ea78f8b7ecbc4b0d8ff5a39faa220ca0c5872a33b256460f263d5d203

Classification: Malicious

37f9b131926abb483d407fd4d3058d0efe1ac7cf88f9964cf0e6ad7502dbc769f6e7367ea78f8b7ecbc4b0d8ff5a39faa220ca0c5872a33b256460f263d5d203 is a malicious file sample.

Detection summary

  • 70 antivirus detections (54% detection ratio)
  • 0 IDS alerts
  • 1 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: OILRIG (G0049)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2023-05-04 07:15:03 2023-05-04 07:15:03
OilRig Maltiverse 2023-04-28 04:48:35 2023-04-29 20:25:59 malicious-activity G0049 OilRig

Tags

apt apt34

Sample information

Filenames
37f9b131926abb483d407fd4d3058d0efe1ac7cf88f9964cf0e6ad7502dbc769f6e7367ea78f8b7ecbc4b0d8ff5a39faa220ca0c5872a33b256460f263d5d203
File type
PE32+ executable (GUI) x86-64, for MS Windows
Size
527872 bytes
MD5
ed957eacd0456b70c518c81996180812
SHA-1
f3782870f225843d72085c611132b7ced797d73e
SHA-256
5704bc31061c7ca675bb9d56b9b56a175bf949accf6542999b3a7305af485906
First indexed
2023-04-29 20:25:59
Last updated
2026-04-13 02:54:48

Antivirus detections

EngineDetection
LionicTrojan.Win32.Inject.1b!c
Elasticmalicious (moderate confidence)
MicroWorld-eScanTrojan.GenericKD.66664728
FireEyeTrojan.GenericKD.66664728
ALYacTrojan.GenericKD.66664728
SangforTrojan.Win64.Inject.Va6z
BitDefenderTrojan.GenericKD.66664728
CrowdStrikewin/malicious_confidence_90% (W)
ArcabitTrojan.Generic.D3F93918
SymantecTrojan Horse
ESET-NOD32a variant of Win64/Inject.W
APEXMalicious
KasperskyTrojan.Win64.Inject.aix
RisingMalware.FakeFolder/ICON!1.D519 (CLASSIC)
SophosMal/Generic-S
F-SecureTrojan.TR/Inject.qhsrc
VIPRETrojan.GenericKD.66664728
TrendMicroTROJ_GEN.R002C0PDR23
McAfee-GW-EditionBehavesLike.Win64.MultiPlug.hh
EmsisoftTrojan.GenericKD.66664728 (B)
AviraTR/Inject.qhsrc
Antiy-AVLTrojan/Win64.Inject
MicrosoftTrojan:Win32/Woreflint.A!cl
ZoneAlarmTrojan.Win64.Inject.aix
GDataTrojan.GenericKD.66664728
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Inject.C5419301
McAfeeArtemis!ED957EACD045
MAXmalware (ai score=84)
DeepInstinctMALICIOUS
Cylanceunsafe
PandaTrj/Chgt.AD
TrendMicro-HouseCallTROJ_GEN.R002C0PDR23
FortinetW32/Inject.W!tr
ALYacDump:Generic.Trojan.Cryptim.Marte.A.10351770
AVGWin64:Trojan-gen
ArcabitDump:Generic.Trojan.Cryptim.Marte.A.D9DF49A
AvastWin64:Trojan-gen
BitDefenderDump:Generic.Trojan.Cryptim.Marte.A.10351770
BkavW64.AIDetectMalware
CTXexe.trojan.inject
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
CynetMalicious (score: 99)
DrWebTrojan.Inject5.3070
ESET-NOD32Win64/Inject.W trojan
EmsisoftDump:Generic.Trojan.Cryptim.Marte.A.10351770 (B)
GDataDump:Generic.Trojan.Cryptim.Marte.A.10351770
GoogleDetected
K7AntiVirusTrojan ( 005fad561 )
K7GWTrojan ( 005fad561 )
LionicTrojan.Win32.Cryptim.4!c
MaxSecureTrojan.Malware.206994969.susgen
McAfeeDti!5704BC31061C
MicroWorld-eScanDump:Generic.Trojan.Cryptim.Marte.A.10351770
MicrosoftTrojan:Win32/Leonem
NANO-AntivirusTrojan.Win64.Inject5.kkfzgw
Paloaltogeneric.ml
SangforTrojan.Win64.Inject.Vhxg
SkyhighBehavesLike.Win64.Dropper.hh
TencentMalware.Win32.Gencirc.11c6f7db
TrellixENSArtemis!ED957EACD045
TrendMicroTROJ_FRS.0NA103JM24
TrendMicro-HouseCallTROJ_FRS.0NA103JM24
VBA32Trojan.Win64.Inject
VIPREDump:Generic.Trojan.Cryptim.Marte.A.10351770
VaristW64/Inject.A
YandexTrojan.Inject!c/2Pecn9GN4
ZillyaTrojan.Inject.Win64.305
alibabacloudTrojan:Win/Inject.W

Process list

NameCommand line
37f9b131926abb483d407fd4d3058d0efe1ac7cf88f9964cf0e6ad7502dbc769f6e7367ea78f8b7ecbc4b0d8ff5a39faa220ca0c5872a33b256460f263d5d203.exe