Sample_C
Classification: Malicious
Sample_C is a trojan (application/x-dosexec). Detected by 83 antivirus engines. Linked to Icedid malware. 4 sightings, last seen 2026-09-16.
Detection summary
- 83 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 4 DNS requests
MITRE ATT&CK associations
Malware families: ICEDID (S0483)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-09-16 01:45:04 | 2026-09-16 01:45:04 | malicious-activity | |
| Icedid | Triage | 2026-05-24 15:29:18 | 2026-06-01 15:15:46 | malicious-activity | S0483 IcedID |
| IcedID | Abuse.ch | 2020-12-17 12:43:58 | 2020-12-17 12:43:58 | malicious-activity | S0483 IcedID |
Tags
icedid banker discovery loader trojanSample information
- Filenames
- Sample_C, tmpd5opqefu, tmpkap39hlz, 76cd290b236b11bd18d81e75e41682208e4c0a5701ce7834a9e289ea9e06eb7e.bin
- File type
- application/x-dosexec
- MD5
17091a1e444f306b928d69f2b905bc8b- SHA-1
1078744833050626e9681c7c233c3a0963a0b559- SHA-256
76cd290b236b11bd18d81e75e41682208e4c0a5701ce7834a9e289ea9e06eb7e- First indexed
- 2020-12-17 13:15:04
- Last updated
- 2026-09-27 17:31:00
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.IcedID.gen |
| APEX | Malicious |
| AVG | Win32:Trojan-gen |
| AhnLab-V3 | PUP/Win.LoadMoney.R449247 |
| Alibaba | TrojanBanker:Win32/Cridex.2c163e39 |
| Antiy-AVL | Trojan[Banker]/Win32.Cridex |
| Arcabit | Trojan.Mint.Zard.53 |
| Avast | Win32:Trojan-gen |
| Avira | TR/Redcap.sxmbo |
| BitDefender | Gen:Heur.Mint.Zard.53 |
| Bkav | W32.AIDetectMalware |
| CAT-QuickHeal | Trojan.Ghanarava.173236829005bc8b |
| CTX | exe.trojan.cridex |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 99) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.IcedID.31 |
| ESET-NOD32 | a variant of Generik.FZTLRMJ |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Heur.Mint.Zard.53 (B) |
| F-Secure | Trojan.TR/Redcap.sxmbo |
| Fortinet | W32/Generik.FZTLRMJ!tr |
| GData | Gen:Heur.Mint.Zard.53 |
| Detected | |
| Gridinsoft | Trojan.Win32.Dridex.oa!s1 |
| Ikarus | Trojan.SuspectCRC |
| Jiangmin | Trojan.Banker.Cridex.agf |
| K7AntiVirus | Trojan ( 0056340f1 ) |
| K7GW | Trojan ( 0056340f1 ) |
| Kaspersky | Trojan-Banker.Win32.Cridex.iuq |
| Lionic | Trojan.Win32.Cridex.14!c |
| Malwarebytes | Malware.AI.4000925757 |
| MaxSecure | Trojan.Malware.74363570.susgen |
| McAfeeD | ti!76CD290B236B |
| MicroWorld-eScan | Gen:Heur.Mint.Zard.53 |
| Microsoft | Trojan:Win32/Wacatac.B!ml |
| NANO-Antivirus | Trojan.Win32.Cridex.hgufkj |
| Paloalto | generic.ml |
| Panda | Trj/GdSda.A |
| Rising | Downloader.Cridex!8.F70 (TFE:5:iNk2nmTYHkC) |
| Sangfor | Banker.Win32.Cridex.Vd3x |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | Artemis!Trojan |
| Sophos | Mal/Generic-S |
| Symantec | Trojan.Gen.MBT |
| Tencent | Malware.Win32.Gencirc.115d79f8 |
| TrellixENS | GenericRXAA-AA!17091A1E444F |
| TrendMicro | TROJ_FRS.0NA103D521 |
| TrendMicro-HouseCall | TROJ_FRS.0NA103D521 |
| VBA32 | TrojanBanker.Cridex |
| VIPRE | Gen:Heur.Mint.Zard.53 |
| Varist | W32/ABTrojan.XJGW-0121 |
| ViRobot | Trojan.Win32.Z.Cridex.145920 |
| VirIT | Trojan.Win32.Genus.CCD |
| Xcitium | Malware@#6ui5bfjdgiw2 |
| Zillya | Trojan.Cridex.Win32.1338 |
| alibabacloud | Trojan[stealer]:Win/Wacatac.B9nj |
| Bkav | W32.AIDetectVM.malware1 |
| MicroWorld-eScan | Gen:Variant.Johnnie.230587 |
| Sangfor | Malware |
| Alibaba | TrojanBanker:Win32/Cridex.8e9a1ca1 |
| TrendMicro | TROJ_GEN.R066C0WG720 |
| Symantec | ML.Attribute.HighConfidence |
| GData | Gen:Variant.Johnnie.230587 |
| BitDefender | Gen:Variant.Johnnie.230587 |
| Rising | Trojan.Occamy!8.F1CD (CLOUD) |
| Ad-Aware | Gen:Variant.Johnnie.230587 |
| VIPRE | Trojan.Win32.Generic!BT |
| FireEye | Generic.mg.17091a1e444f306b |
| Arcabit | Trojan.Johnnie.D384BB |
| ZoneAlarm | Trojan-Banker.Win32.Cridex.iuq |
| Microsoft | Trojan:Win32/Occamy.C76 |
| Cynet | Malicious (score: 85) |
| McAfee | Artemis!17091A1E444F |
| MAX | malware (ai score=88) |
| Malwarebytes | Trojan.Dridex |
| TrendMicro-HouseCall | TROJ_GEN.R066C0WG720 |
| Tencent | Win32.Trojan-banker.Cridex.Dvpx |
| SentinelOne | DFI - Suspicious PE |
| Webroot | W32.Trojan.Gen |
| CrowdStrike | win/malicious_confidence_60% (W) |
| Qihoo-360 | Win32/Trojan.ac9 |
DNS requests
153ishak.best boldidiotruss.xyz ilu21plane.xyz nizaoplov.xyz