7bd3ff9ba43020688acaa05ce4e0a8f92f53d9d9264053255a5937cbd7a5465e.exe

Classification: Malicious

7bd3ff9ba43020688acaa05ce4e0a8f92f53d9d9264053255a5937cbd7a5465e.exe is a malicious file sample. Linked to Turla, Oilrig activity.

Detection summary

  • 38 antivirus detections (54% detection ratio)
  • 0 IDS alerts
  • 1 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: TURLA (G0010) OILRIG (G0049)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Turla Maltiverse 2023-03-03 04:26:37 2023-03-04 19:42:12 malicious-activity G0010 Turla
OilRig Maltiverse 2023-03-03 04:26:38 2023-03-04 19:41:57 malicious-activity G0049 OilRig
Trojan.Generic Hybrid-Analysis 2019-06-20 12:00:05 2019-06-20 12:00:05

Tags

apt apt34

Sample information

Filenames
7bd3ff9ba43020688acaa05ce4e0a8f92f53d9d9264053255a5937cbd7a5465e.exe
File type
PE32 executable (console) Intel 80386 Mono/.Net as ...
Size
13824 bytes
MD5
1753424464a00c628d7166152cc30d1e
SHA-1
05071cf5da3040d6cbdfd9413a79029e605ac364
SHA-256
7bd3ff9ba43020688acaa05ce4e0a8f92f53d9d9264053255a5937cbd7a5465e
First indexed
2019-06-20 12:00:05
Last updated
2023-03-04 19:42:12

Antivirus detections

EngineDetection
MicroWorld-eScanTrojan.GenericKD.41334213
FireEyeTrojan.GenericKD.41334213
CAT-QuickHealTrojan.Agent
McAfeeRDN/Generic.dx
BitDefenderTrojan.GenericKD.41334213
K7GWTrojan ( 0054e04e1 )
K7AntiVirusTrojan ( 0054e04e1 )
TrendMicroTROJ_GEN.R011C0WEU19
SymantecBackdoor.Trojan
GDataTrojan.GenericKD.41334213
KasperskyTrojan.Win32.Agent.xaadzi
AlibabaTrojan:Win32/Agent.bc6b593c
NANO-AntivirusTrojan.Win32.Generic.fqfkxd
AegisLabTrojan.Win32.Agent.4!c
Ad-AwareTrojan.GenericKD.41334213
EmsisoftTrojan.GenericKD.41334213 (B)
ComodoMalware@#35pnhj0g95ewj
ZillyaTrojan.Agent.Win32.1099599
McAfee-GW-EditionRDN/Generic.dx
SophosMal/Generic-S
CyrenW32/Trojan.POWH-1817
Antiy-AVLTrojan/Win32.Agent
MicrosoftTrojan:Win32/Tiggre!plock
ArcabitTrojan.Generic.D276B5C5
ZoneAlarmTrojan.Win32.Agent.xaadzi
ESET-NOD32a variant of MSIL/Agent.BVX
VBA32TScope.Trojan.MSIL
ALYacTrojan.GenericKD.41334213
CylanceUnsafe
TrendMicro-HouseCallTROJ_GEN.R011C0WEU19
RisingTrojan.Agent!8.B1E (CLOUD)
YandexTrojan.Agent!XIC5UgHUYrg
IkarusTrojan.MSIL.Agent
FortinetW32/Agent.BVX!tr
AVGWin32:Trojan-gen
Cybereasonmalicious.464a00
AvastWin32:Trojan-gen
Qihoo-360Win32/Trojan.3f2

Process list

NameCommand line
7bd3ff9ba43020688acaa05ce4e0a8f92f53d9d9264053255a5937cbd7a5465e.exe