paerax64.docx
Classification: Malicious
paerax64.docx is a trojan (application/x-dosexec). Detected by 67 antivirus engines. Linked to Bazar malware. 2 sightings, last seen 2022-01-24.
Detection summary
- 67 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: BAZAR (S0534)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| BazaLoader | MalwareBazaar Abuse.ch | 2022-01-24 19:26:45 | 2022-01-24 19:26:45 | malicious-activity | S0534 Bazar |
| Generic.Malware | MalwareBazaar Abuse.ch | 2022-01-24 19:26:45 | 2022-01-24 19:26:45 | malicious-activity |
Sample information
- Filenames
- paerax64.docx
- File type
- application/x-dosexec
- MD5
2b633b182a0adaa07c60c61e733ee34b- SHA-1
a5c015e2ef9c5a1d929785e61e97ff425df30b87- SHA-256
8de17cf24ee615ebefd88dfb5ec83258cb04a295f199d2f962cba788cdcaf098- First indexed
- 2022-01-24 21:15:07
- Last updated
- 2026-04-26 08:12:10
Antivirus detections
| Engine | Detection |
|---|---|
| Lionic | Trojan.Win64.Kryplod.4!c |
| Elastic | malicious (high confidence) |
| MicroWorld-eScan | Trojan.GenericKD.38710357 |
| Cyren | W64/Injector.ASL.gen!Eldorado |
| ESET-NOD32 | a variant of Win64/Kryptik.CVX |
| Avast | FileRepMalware |
| Kaspersky | Trojan.Win64.Kryplod.bdog |
| BitDefender | Trojan.GenericKD.38710357 |
| Ad-Aware | Trojan.GenericKD.38710357 |
| Sophos | Generic ML PUA (PUA) |
| TrendMicro | TrojanSpy.Win64.BAZARLOADER.YXCAYZ |
| McAfee-GW-Edition | Artemis!Trojan |
| FireEye | Trojan.GenericKD.38710357 |
| Kingsoft | Win32.Troj.Undef.(kcloud) |
| GData | Trojan.GenericKD.38710357 |
| Cynet | Malicious (score: 100) |
| AhnLab-V3 | Trojan/Win.Agent.C4931847 |
| McAfee | Artemis!2B633B182A0A |
| MAX | malware (ai score=81) |
| Cylance | Unsafe |
| TrendMicro-HouseCall | TrojanSpy.Win64.BAZARLOADER.YXCAYZ |
| Rising | Trojan.Kryplod!8.100A5 (CLOUD) |
| Fortinet | W32/PossibleThreat |
| AVG | FileRepMalware |
| ALYac | Gen:Variant.Ulise.339817 |
| APEX | Malicious |
| AVG | Win64:Malware-gen |
| Antiy-AVL | Trojan/Win64.Kryplod |
| Arcabit | Trojan.Ulise.D52F69 |
| Avast | Win64:Malware-gen |
| BitDefender | Gen:Variant.Ulise.339817 |
| Bkav | W64.AIDetectMalware |
| CAT-QuickHeal | Trojan.Ghanarava.17291310913ee34b |
| CTX | dll.trojan.kryplod |
| CrowdStrike | win/malicious_confidence_100% (W) |
| DeepInstinct | MALICIOUS |
| Emsisoft | Gen:Variant.Ulise.339817 (B) |
| FireEye | Generic.mg.2b633b182a0adaa0 |
| GData | Gen:Variant.Ulise.339817 |
| Detected | |
| Ikarus | Trojan.Win64.Crypt |
| Jiangmin | Trojan.Kryplod.le |
| Lionic | Trojan.Win32.Kryplod.4!c |
| Malwarebytes | Malware.AI.3757341381 |
| MaxSecure | Trojan.Malware.218184685.susgen |
| McAfee | Icedid-FUDT!2B633B182A0A |
| McAfeeD | ti!8DE17CF24EE6 |
| MicroWorld-eScan | Gen:Variant.Ulise.339817 |
| Microsoft | Trojan:Win32/BazarLoader.CR!MTB |
| NANO-Antivirus | Trojan.Win64.Kryptik.jpgvwy |
| Paloalto | generic.ml |
| Panda | Trj/CI.A |
| Rising | Trojan.Kryplod!8.100A5 (TFE:3:nlIzkzYY2GH) |
| SentinelOne | Static AI - Suspicious PE |
| Skyhigh | BehavesLike.Win64.Ransom.fm |
| Sophos | Mal/Generic-S |
| Symantec | Trojan.Gen.2 |
| Tencent | Malware.Win32.Gencirc.141da62d |
| TrendMicro | TROJ_GEN.R002C0DJE24 |
| TrendMicro-HouseCall | TROJ_GEN.R002C0DJE24 |
| VIPRE | Gen:Variant.Ulise.339817 |
| Varist | W64/Injector.ASL.gen!Eldorado |
| ViRobot | Trojan.Win.Z.Ulise.335360 |
| Xcitium | Malware@#1hk2o4134n44p |
| Yandex | Trojan.Kryptik!cbOXvCElWsk |
| Zillya | Trojan.Kryptik.Win64.49894 |
| alibabacloud | Trojan:Win/BazarLoader.CV8PHU |