8b473b9baa481321dcec21652f494c92b733f3a9c62bee6daca9823b6316efee
Classification: Malicious
8b473b9baa481321dcec21652f494c92b733f3a9c62bee6daca9823b6316efee is a malicious file sample. Reported by 1 threat source, last seen 2025-01-13.
Detection summary
- 65 antivirus detections
- 0 IDS alerts
- 1 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Generic Malware |
Hybrid-Analysis |
2025-01-13 16:30:03 |
2025-01-13 17:00:08 |
|
|
Sample information
- Filenames
- 8b473b9baa481321dcec21652f494c92b733f3a9c62bee6daca9823b6316efee
- File type
- PE32 executable (GUI) Intel 80386, for MS Windows
- Size
- 988304 bytes
- MD5
2714b32062855a786f70f6057711a5e2- SHA-1
9f543705222b1334d6116a5f62718df52ee82bfb- SHA-256
8b473b9baa481321dcec21652f494c92b733f3a9c62bee6daca9823b6316efee- First indexed
- 2025-01-13 16:14:59
- Last updated
- 2026-07-11 01:19:32
Antivirus detections
| Engine | Detection |
|---|
| ALYac | Win32.Davion.C |
| APEX | Malicious |
| AVG | Win32:Adware-gen [Adw] |
| AhnLab-V3 | Dropper/Win32.Dorifel.R49471 |
| Alibaba | Virus:Win32/Quervar.21e6749e |
| Antiy-AVL | Worm/Win32.Dorifel.b |
| Arcabit | Win32.Davion.C |
| Avast | Win32:Adware-gen [Adw] |
| Avira | WORM/Dorifel.blloa |
| Baidu | Win32.Virus.Quervar.b |
| BitDefender | Win32.Davion.C |
| Bkav | W32.XDocCryptYHPtv2.Worm |
| CAT-QuickHeal | W32.Quervar.B |
| CMC | Virus.Win32.XdocCrypt.2!O |
| CTX | exe.trojan.dorifel |
| ClamAV | Win.Trojan.Dorifel-94 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 99) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Siggen4.18211 |
| ESET-NOD32 | Win32/Quervar.E |
| Elastic | malicious (high confidence) |
| Emsisoft | Win32.Davion.C (B) |
| F-Secure | Worm.WORM/Dorifel.blloa |
| Fortinet | W32/Dorifel.AB!tr |
| GData | Win32.Davion.C |
| Google | Detected |
| Gridinsoft | Ransom.Win32.Dropper.oa!s1 |
| Ikarus | Virus.Win32.Quervar |
| Jiangmin | Worm/Dorifel.w |
| K7AntiVirus | EmailWorm ( 00541d5f1 ) |
| K7GW | EmailWorm ( 00541d5f1 ) |
| Kaspersky | Worm.Win32.Dorifel.b |
| Kingsoft | Win32.Infected.AutoInfector.a |
| Lionic | Trojan.Win32.Delf.moev |
| Malwarebytes | Generic.Malware.AI.DDS |
| MaxSecure | Trojan.Malware.4593910.susgen |
| McAfeeD | ti!8B473B9BAA48 |
| MicroWorld-eScan | Win32.Davion.C |
| Microsoft | Virus:Win32/Quervar.C |
| NANO-Antivirus | Trojan.Win32.TrjGen.wsdeb |
| Paloalto | generic.ml |
| Panda | W32/CryptD.A |
| Rising | Virus.DoxCrypt!1.6580 (CLASSIC) |
| Sangfor | Trojan.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | BehavesLike.Win32.Dropper.dc |
| Sophos | W32/Quervar-C |
| Symantec | Trojan.Exprez.B |
| Tencent | Virus.Win32.Quervar.f |
| Trapmine | malicious.high.ml.score |
| TrellixENS | W32/XDocCrypt.a |
| TrendMicro | PE_QUERVAR.D |
| TrendMicro-HouseCall | PE_QUERVAR.D |
| VBA32 | Virus.Dorifel.3905 |
| VIPRE | Win32.Davion.C |
| Varist | W32/Trojan.SXDN-9093 |
| Xcitium | TrojWare.Win32.Dorifel.a@4q46bp |
| Yandex | Trojan.GenAsa!+k+C6YvTclk |
| Zillya | Worm.Dorifel.Win32.2 |
| ZoneAlarm | W32/Quervar-C |
| alibabacloud | Trojan:Win/Fake.CZ |
| huorong | Virus/Quervar.c@U |
| tehtris | Generic.Malware |
Process list
| Name | Command line |
|---|
| 8b473b9baa481321dcec21652f494c92b733f3a9c62bee6daca9823b6316efee.exe | |