tmp3dx613lj

Classification: Malicious

tmp3dx613lj is a trojan (Windows executable, 49.5 KB). Flagged by 68% of antivirus engines (47 detections). Linked to Turla activity.

Detection summary

  • 47 antivirus detections (68% detection ratio)
  • 0 IDS alerts
  • 2 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: TURLA (G0010)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Backdoor.Turla Hybrid-Analysis 2020-10-09 00:30:06 2020-10-09 00:30:06 G0010 Turla

Sample information

Filenames
tmp3dx613lj
File type
PE32 executable (DLL) (GUI) Intel 80386, for MS Wi ...
Size
50688 bytes
MD5
6d8c6dcb4a09c0f6cee25567281b3271
SHA-1
b346bb5828a65c0349547d8110d7bfff6dea3a2e
SHA-256
5722fbe25fde22e4cf623bf839e0dfa18d0ee5e8bd276e208ae2be3c1cf069f6
First indexed
2020-10-09 00:30:06
Last updated
2026-09-23 19:29:31

Antivirus detections

EngineDetection
BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.33914085
CAT-QuickHealBackdoor.Turla
McAfeeRDN/Generic.dx
ZillyaTrojan.Turla.Win32.177
SangforMalware
AlibabaBackdoor:Win32/Turla.398ad934
K7GWTrojan ( 005683e51 )
K7AntiVirusTrojan ( 005683e51 )
InvinceaMal/Generic-S
BitDefenderThetaGen:NN.ZedlaF.34282.dm4@ailEQDk
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
KasperskyBackdoor.Win32.Turla.gfr
BitDefenderTrojan.GenericKD.33914085
AegisLabTrojan.Win32.Turla.m!c
AvastWin32:Trojan-gen
Ad-AwareTrojan.GenericKD.33914085
SophosMal/Generic-S
ComodoMalware@#3b5l2dw4tfevm
F-SecureTrojan.TR/Turla.uidpf
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionRDN/Generic.dx
FireEyeGeneric.mg.6d8c6dcb4a09c0f6
EmsisoftTrojan.GenericKD.33914085 (B)
AviraTR/Turla.uidpf
MAXmalware (ai score=87)
Antiy-AVLTrojan[Backdoor]/Win32.Turla
MicrosoftTrojan:Win32/Ymacco.AA57
ArcabitTrojan.Generic.D2057CE5
ZoneAlarmBackdoor.Win32.Turla.gfr
GDataTrojan.GenericKD.33914085
CynetMalicious (score: 90)
AhnLab-V3Backdoor/Win32.Turla.C4135548
ALYacBackdoor.Turla.A
TACHYONBackdoor/W32.Turla.50688
VBA32Backdoor.Turla
CylanceUnsafe
ESET-NOD32a variant of Win32/Turla.EO
RisingTrojan.Turla!8.1C8 (TFE:6:FKf91g2dXZF)
IkarusTrojan-Downloader.Win32.Farfli
FortinetW32/Turla.EO!tr.bdr
AVGWin32:Trojan-gen
PandaTrj/GdSda.A
Qihoo-360Win32/Backdoor.URL.01b

Process list

NameCommand line
<Ignored Process>
rundll32.exe"C:\tmp3dx613lj.dll",#1