embarfpoint.point

Classification: Malicious

embarfpoint.point is a trojan (application/x-dosexec, 338.0 KB). Flagged by 71% of antivirus engines (96 detections). Linked to Trickbot malware.

Detection summary

  • 96 antivirus detections (71% detection ratio)
  • 0 IDS alerts
  • 5 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: TRICKBOT (S0266)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2023-06-30 16:30:03 2023-06-30 16:30:03
TrickBot Abuse.ch 2021-02-23 20:05:38 2021-02-23 20:05:38 malicious-activity S0266 TrickBot

Tags

banker emotet infostealer qakbot

Sample information

Filenames
embarfpoint.point, TDCS.dll
File type
application/x-dosexec
Size
346112 bytes
MD5
884dab96c679194fc5140322d5ce9e9d
SHA-1
e7277a259a6f05bb74c14324f97b9513c8d4d9e5
SHA-256
5b6661b43c17ad12172c4327aa4b79be8bcf1c421cb08d6bff19f7e26282e9d8
First indexed
2021-02-23 21:15:04
Last updated
2026-10-07 02:07:54

Antivirus detections

EngineDetection
LionicTrojan.Win32.Trickpak.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 99)
FireEyeGeneric.mg.884dab96c679194f
McAfeeTrojan-FTJO!884DAB96C679
CylanceUnsafe
ZillyaTrojan.Trickpak.Win32.37
SangforTrojan.Win32.Trickpak.gen
K7AntiVirusRiskware ( 0040eff71 )
AlibabaTrojan:Win32/Trickpak.3dcddb28
K7GWRiskware ( 0040eff71 )
BitDefenderThetaGen:NN.ZedlaF.36158.vq4@aKePLhn
SymantecML.Attribute.HighConfidence
ESET-NOD32Win32/TrickBot.DG
TrendMicro-HouseCallTrojanSpy.Win32.TRICKBOT.THBBEBA
KasperskyHEUR:Trojan.Win32.Trickpak.gen
BitDefenderGen:Variant.Zusy.368968
NANO-AntivirusTrojan.Win32.Trickpak.imvkbk
MicroWorld-eScanGen:Variant.Zusy.368968
AvastWin32:BankerX-gen [Trj]
TencentWin32.Trojan.Trickpak.Gajl
Ad-AwareGen:Variant.Zusy.368968
EmsisoftTrojan.TrickBot (A)
ComodoMalware@#1g6btpxexjto5
VIPREGen:Variant.Zusy.368968
TrendMicroTrojanSpy.Win32.TRICKBOT.THBBEBA
McAfee-GW-EditionBehavesLike.Win32.Generic.fc
Trapminemalicious.high.ml.score
SophosMal/Generic-S
IkarusTrojan.SuspectCRC
GDataGen:Variant.Zusy.368968
JiangminTrojan.Trickpak.ba
WebrootW32.Trojan.Gen
AviraTR/Crypt.XPACK.qwzwe
MAXmalware (ai score=100)
Antiy-AVLTrojan/Win32.TrickBot
KingsoftWin32.Troj.Undef.(kcloud)
GridinsoftTrojan.Win32.Agent.oa!s1
ArcabitTrojan.Zusy.D5A148
MicrosoftTrojan:Win32/TrickBotCrypt.PZ!MTB
GoogleDetected
AhnLab-V3Malware/Gen.Reputation.C4345946
VBA32Trojan.Trickpak
ALYacTrojan.Trickster.Gen
APEXMalicious
Rising[email protected] (RDML:E1VlOkqzYDBzSoiPjvuyZA)
SentinelOneStatic AI - Suspicious PE
FortinetW32/Kryptik.HJLB!tr
AVGWin32:BankerX-gen [Trj]
PandaTrj/GdSda.A
BkavW32.AIDetectGBM.malware.02
McAfeeArtemis!884DAB96C679
CrowdStrikewin/malicious_confidence_80% (W)
Paloaltogeneric.ml
KasperskyUDS:DangerousObject.Multi.Generic
SophosML/PE-A
MicrosoftTrojan:Win32/Wacatac.B!ml
ZoneAlarmUDS:DangerousObject.Multi.Generic
RisingTrojan.Trickpak!8.122C7 (TFE:dGZlOgZ9RHOveNaXyg)
BitDefenderThetaGen:NN.ZedlaF.34590.vq4@aKePLhn
Qihoo-360HEUR/QVM40.1.7CC7.Malware.Gen
AviraHEUR/AGEN.1302562
BkavW32.AIDetectMalware
CAT-QuickHealTrojan.Ghanarava.1711775329ce9e9d
CTXdll.trojan.trickpak
CrowdStrikewin/malicious_confidence_100% (W)
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
F-SecureHeuristic.HEUR/AGEN.1302562
Kingsoftmalware.kb.a.990
MaxSecureTrojan.Malware.109946090.susgen
McAfeeDti!5B6661B43C17
Rising[email protected] (RDML:E1VlOkqzYDBzSoiPjvuyZA)
SangforTrojan.Win32.Trickpak.V2r1
SkyhighBehavesLike.Win32.Trojan.fc
TencentMalware.Win32.Gencirc.13acca93
VaristW32/ABTrojan.DNIS-0391
XcitiumMalware@#1g6btpxexjto5
YandexTrojan.Trickpak!C2jSLpWelrs
alibabacloudTrojan:Win/TrickBot.DG
huorongTrojan/TrickBot.da
AVGWin32:MalwareX-gen [Bank]
AvastWin32:MalwareX-gen [Bank]
AviraTR/W32.MalwareX
BkavW32.Malware.5501097B
ESET-NOD32Win32/TrickBot.DG trojan
F-SecureTrojan.TR/W32.MalwareX
K7AntiVirusTrojan ( 000f224b1 )
K7GWTrojan ( 000f224b1 )
KingsoftWin32.Troj.Unknown.a
LionicTrojan.Win32.TrickBot.4!c
MalwarebytesMalware.Heuristic.2106
RisingTrojan.TrickBot!8.E313 (TFE:5:chmEP4XWHkU)
SangforTrojan.Win32.Agent.V9am
SkyhighBehavesLike.Win32.Generic.fc
TrellixENSTrojan-FTJO!884DAB96C679

Process list

NameCommand line
<Ignored Process>
rundll32.exe"C:\embarfpoint.point.dll",#1
WerFault.exe-u -p 2868 -s 680
WerFault.exe-u -p 2868 -s 680
WerFault.exe-u -p 2868 -s 680