82c4391b_by_Libranalysis
Classification: Malicious
82c4391b_by_Libranalysis is a trojan (application/x-dosexec). Detected by 39 antivirus engines. Linked to Dridex malware. 4 sightings, last seen 2021-05-05.
Detection summary
- 39 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: DRIDEX (S0384)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Dridex | Abuse.ch | 2021-05-05 19:15:09 | 2021-05-05 19:15:09 | malicious-activity | S0384 Dridex |
| Generic.Malware | Abuse.ch | 2021-05-05 19:15:09 | 2021-05-05 19:15:09 | malicious-activity |
Sample information
- Filenames
- 82c4391b_by_Libranalysis
- File type
- application/x-dosexec
- MD5
82c4391b5edef1d686986864444d3abd- SHA-1
1125564607b9fd4f186e02efcc8f981961d28871- SHA-256
97864eff1c704d6e33968a1f1de0e86cbc5dd842eb9e2667a9784def86f332e7- First indexed
- 2021-05-05 21:15:12
- Last updated
- 2026-10-09 06:01:15
Antivirus detections
| Engine | Detection |
|---|---|
| Bkav | W32.AIDetect.malware2 |
| Elastic | malicious (high confidence) |
| DrWeb | Trojan.Dridex.776 |
| MicroWorld-eScan | Trojan.GenericKDZ.74986 |
| FireEye | Generic.mg.82c4391b5edef1d6 |
| McAfee | Artemis!82C4391B5EDE |
| Cylance | Unsafe |
| Sangfor | Trojan.Win32.Save.a |
| CrowdStrike | win/malicious_confidence_100% (W) |
| K7GW | Riskware ( 0040eff71 ) |
| K7AntiVirus | Riskware ( 0040eff71 ) |
| BitDefenderTheta | Gen:NN.ZedlaF.34688.ku8@a0Qt1yb |
| ESET-NOD32 | a variant of Win32/Kryptik.HKSW |
| APEX | Malicious |
| Avast | Win32:Malware-gen |
| Kaspersky | HEUR:Trojan.Win32.Sdum.gen |
| BitDefender | Trojan.GenericKDZ.74986 |
| Ad-Aware | Trojan.GenericKDZ.74986 |
| Emsisoft | Trojan.GenericKDZ.74986 (B) |
| Comodo | TrojWare.Win32.UMal.bnnfb@0 |
| VIPRE | Trojan.Win32.Generic!BT |
| McAfee-GW-Edition | RDN/Generic.grp |
| Sophos | Mal/Generic-R + Mal/EncPk-APX |
| Ikarus | Trojan-Banker.Dridex |
| Avira | HEUR/AGEN.1142282 |
| Kingsoft | Win32.Troj.Undef.(kcloud) |
| Microsoft | Trojan:Win32/Dridex.OZ!MTB |
| ZoneAlarm | HEUR:Trojan.Win32.Sdum.gen |
| GData | Trojan.GenericKDZ.74986 |
| Cynet | Malicious (score: 100) |
| Acronis | suspicious |
| ALYac | Trojan.GenericKDZ.74986 |
| MAX | malware (ai score=81) |
| Malwarebytes | Trojan.Crypt |
| Rising | Trojan.Kryptik!8.8 (RDMK:cmRtazrpdyg81YKU5wn9PfHbfDSb) |
| SentinelOne | Static AI - Suspicious PE |
| Fortinet | W32/EncPk.APX!tr |
| AVG | Win32:Malware-gen |
| Panda | Trj/GdSda.A |