update.dll

Classification: Malicious

update.dll is a trojan (application/x-dosexec). Detected by 13 antivirus engines. Linked to Trickbot malware. Reported by Abuse.ch, last seen 2020-06-25.

Detection summary

  • 13 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: TRICKBOT (S0266)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
TrickBot Abuse.ch 2020-06-25 06:29:44 2020-06-25 06:29:44 S0266 TrickBot

Sample information

Filenames
update.dll
File type
application/x-dosexec
MD5
1c9878d3750ac1db98e822f4d835b62d
SHA-1
39d9a0014994305be0343e2c77882cdb9dece91a
SHA-256
7747b1a2bdb135e1fd300b612077bf1b46e8a838369dcd4266cdff6d3aad05b1
First indexed
2020-06-25 08:15:08
Last updated
2026-10-04 21:09:57

Antivirus detections

EngineDetection
DrWebTrojan.DownLoader33.35922
MicroWorld-eScanTrojan.Agent.ETAC
FireEyeTrojan.Agent.ETAC
K7AntiVirusTrojan ( 005697711 )
CrowdStrikewin/malicious_confidence_80% (D)
ESET-NOD32a variant of Win32/GenKryptik.ENBQ
RisingTrojan.GenKryptik!8.AA55 (C64:YzY0OtNc7noB2f4b)
FortinetW32/GenKryptik.ENBQ!tr
AviraTR/AD.TrickBot.obmxx
MAXmalware (ai score=86)
CynetMalicious (score: 85)
Ad-AwareTrojan.Agent.ETAC
APEXMalicious