NVDriverSearch.ct

Classification: Malicious

NVDriverSearch.ct is a trojan (application/x-dosexec). Detected by 40 antivirus engines. Linked to Toneshell malware.

Detection summary

  • 40 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: TONESHELL (S1239)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Toneshell Triage 2026-03-10 11:10:22 2026-03-10 11:10:22 malicious-activity S1239 TONESHELL
Generic.Malware MalwareBazaar Abuse.ch 2024-01-26 20:44:15 2024-01-26 20:44:15 malicious-activity

Tags

toneshell earth_preta mustang_panda discovery

Sample information

Filenames
5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b, NVDriverSearch.ct
File type
application/x-dosexec
MD5
128cfff31aa393605ececf2689a40fd6
SHA-1
5002563c40154177d4afa4154a73a712532f242a
SHA-256
5afe21142999659a4050f6e038a6dab96cf4827f332497049a91cdb1a4d4828b
SHA-512
7899e34022c36590389c8ee1b1b37f948b1dc7cd5063c3b07cefe94733b7b9807e178bc7ec886b72e3bedc7ecf0d4f759f0531f1a5c032e05127f2c565eb50ce
First indexed
2024-01-26 21:18:35
Last updated
2026-07-31 15:38:58

Antivirus detections

EngineDetection
ALYacTrojan.GenericKD.71167187
APEXMalicious
AVGWin32:TrojanX-gen [Trj]
AlibabaTrojan:Win32/Malgent.cc031ed2
Antiy-AVLTrojan/Win32.Agentb
ArcabitTrojan.Generic.D43DECD3
AvastWin32:TrojanX-gen [Trj]
AviraTR/Redcap.jfqxp
BitDefenderTrojan.GenericKD.71167187
BitDefenderThetaGen:NN.ZedlaF.36680.fq4@aSRAGxf
Cylanceunsafe
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
Elasticmalicious (high confidence)
EmsisoftTrojan.GenericKD.71167187 (B)
F-SecureTrojan.TR/Redcap.jfqxp
FireEyeTrojan.GenericKD.71167187
FortinetW32/PossibleThreat
GDataTrojan.GenericKD.71167187
GoogleDetected
IkarusTrojan.Win32.Malgent
K7AntiVirusRiskware ( 00584baa1 )
K7GWRiskware ( 00584baa1 )
KasperskyTrojan.Win32.Agentb.lkrx
KingsoftWin32.Trojan.Agentb.a
LionicTrojan.Win32.Agentb.X!c
McAfeeRDN/Generic.dx
MicroWorld-eScanTrojan.GenericKD.71167187
MicrosoftTrojan:Win32/Malgent!MSR
PandaTrj/GdSda.A
Rising[email protected] (RDML:qONmPdyi57ocCKlWR2saaA)
SangforTrojan.Win32.Malgent.Vcba
SkyhighRDN/Generic.dx
SophosMal/Generic-S
SymantecTrojan.Gen.MBT
TrendMicroTROJ_GEN.R002C0DAD24
TrendMicro-HouseCallTROJ_GEN.R002C0DAD24
VIPRETrojan.GenericKD.71167187
VaristW32/ABRisk.PPKD-0810
ZoneAlarmTrojan.Win32.Agentb.lkrx