update.dll
Classification: Malicious
update.dll is a malicious file sample (application/x-dosexec). Detected by 7 antivirus engines. Linked to Trickbot malware.
Detection summary
- 7 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: TRICKBOT (S0266)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| TrickBot | Abuse.ch | 2020-07-07 18:58:40 | 2020-07-07 18:58:40 | S0266 TrickBot |
Sample information
- Filenames
- update.dll
- File type
- application/x-dosexec
- MD5
440cb0146becfb211e4ab0da1662065a- SHA-1
d03a3966540c3f282932246e03a9db72a0e1856b- SHA-256
8c47730867b57083f6ec4ab8c237f32f556c04ee4a973f2fc1c1be2919e49199- First indexed
- 2020-07-07 20:15:04
- Last updated
- 2026-10-04 21:09:56
Antivirus detections
| Engine | Detection |
|---|---|
| FireEye | Generic.mg.440cb0146becfb21 |
| Cylance | Unsafe |
| CrowdStrike | win/malicious_confidence_100% (D) |
| APEX | Malicious |
| Endgame | malicious (high confidence) |
| ESET-NOD32 | Win32/TrickBot.DA |
| SentinelOne | DFI - Malicious PE |