itiscalfaro.cz_file_12.05.2022.doc

Classification: Malicious

itiscalfaro.cz_file_12.05.2022.doc is a malicious file sample. Linked to Svcready malware. Reported by 1 threat source, last seen 2022-06-07.

Detection summary

  • 29 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: SVCREADY (S1064)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
SVCReady MalwareBazaar Abuse.ch 2022-06-07 11:22:56 2022-06-07 11:22:56 malicious-activity S1064 SVCReady
Generic.Malware MalwareBazaar Abuse.ch 2022-06-07 11:22:56 2022-06-07 11:22:56 malicious-activity

Sample information

Filenames
itiscalfaro.cz_file_12.05.2022.doc
File type
application/zip
MD5
91c1facc4d1ae0255706d2f658e9296d
SHA-1
ea11ca6ef95f664a607ddc0808872df15574c3c6
SHA-256
748352146ab86ea1a32dfed0b0d5fac0efc52728bccd79476b74fb73517efb21
First indexed
2022-06-07 13:15:17
Last updated
2025-11-13 13:14:08

Antivirus detections

EngineDetection
LionicTrojan.Multi.Generic.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 99)
AlibabaTrojan:Office/Shelod.7a189059
ESET-NOD32VBA/Agent.AEY
AvastScript:SNH-gen [Trj]
KasperskyUDS:DangerousObject.Multi.Generic
F-SecureMalware.VBA/Agent.gtuzr
McAfee-GW-EditionArtemis!Trojan
SentinelOneStatic AI - Malicious OPENXML
AviraVBA/Agent.gtuzr
MicrosoftTrojan:Script/Sabsik.FL.B!ml
ArcabitHEUR.VBA.CG.1
ZoneAlarmHEUR:Trojan.MSOffice.Shelod.gen
Acronissuspicious
RisingMalware.Obfus/[email protected] (VBA)
FortinetVBA/Agent.DXB!tr
AVGScript:SNH-gen [Trj]
LionicTrojan.MSOffice.Shelod.4!c
FireEyeTrojan.GenericKD.49136734
McAfeeW97M/Downloader.dvi
CyrenABRisk.WLTT-5
TrendMicro-HouseCallTrojan.VBS.SHELOD.VSNW08F22
BitDefenderTrojan.GenericKD.49136734
TrendMicroTrojan.VBS.SHELOD.VSNW08F22
MicrosoftTrojan:O97M/Donoff!MSR
ViRobotDOC.Z.Agent.2662008
GDataTrojan.GenericKD.49136734
MAXmalware (ai score=84)