97d36f2464f172c09b48513adc9a5fd9b5dc74645841db4500b1a63cd6f1bd3f

Classification: Malicious

97d36f2464f172c09b48513adc9a5fd9b5dc74645841db4500b1a63cd6f1bd3f is a trojan (script). Detected by 39 antivirus engines. Linked to Apt-C-36 activity.

Detection summary

  • 39 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: APT-C-36 (G0099)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Cyber Threat Alliance 2026-08-09 10:18:48 2026-08-09 10:18:48 malicious-activity
Apt-C-36 Maltiverse 2023-04-27 04:42:55 2023-04-28 14:38:31 malicious-activity G0099 APT-C-36

Tags

apt

Sample information

Filenames
97d36f2464f172c09b48513adc9a5fd9b5dc74645841db4500b1a63cd6f1bd3f.vbs
File type
Vbscript
MD5
1589d5cccb6f7469b29d95314b5de32a
SHA-1
4e1f81e70044cf3b294d9f3f6988575d238c24d9
SHA-256
97d36f2464f172c09b48513adc9a5fd9b5dc74645841db4500b1a63cd6f1bd3f
First indexed
2023-04-26 03:09:22
Last updated
2025-12-16 14:45:50

Antivirus detections

EngineDetection
LionicTrojan.UKP.Generic.4!c
FireEyeVB:Trojan.Valyria.8141
CyrenVBS/Agent.AZZ
SymantecTrojan.Gen.NPE
ESET-NOD32VBS/TrojanDownloader.Agent.XCQ
AvastScript:SNH-gen [Drp]
CynetMalicious (score: 99)
KasperskyHEUR:Trojan.Script.Generic
BitDefenderVB:Trojan.Valyria.8141
MicroWorld-eScanVB:Trojan.Valyria.8141
TencentVbs.Trojan-Downloader.Der.Hkjl
F-SecureMalware.VBS/YAV.Minerva.vjzpw
VIPREVB:Trojan.Valyria.8141
EmsisoftVB:Trojan.Valyria.8141 (B)
GDataVB:Trojan.Valyria.8141
AviraVBS/YAV.Minerva.vjzpw
GridinsoftTrojan.U.Remcos.bot
ArcabitVB:Trojan.Valyria.D1FCD
GoogleDetected
ALYacVB:Trojan.Valyria.8141
MAXmalware (ai score=81)
IkarusWin32.Outbreak
AVGScript:SNH-gen [Drp]
ALYacTrojan.GenericKD.66665308
Antiy-AVLTrojan[Downloader]/VBS.Agent
ArcabitTrojan.Generic.D3F93B5C
AviraVBS/Dldr.Agent.VPUX
BitDefenderTrojan.GenericKD.66665308
DrWebTrojan.DownLoader45.54955
EmsisoftTrojan.GenericKD.66665308 (B)
F-SecureMalware.VBS/Dldr.Agent.VPUX
FireEyeTrojan.GenericKD.66665308
GDataTrojan.GenericKD.66665308
IkarusTrojan-Downloader.VBS.Agent
McAfeeVBS/Downloader.abt
McAfee-GW-EditionVBS/Downloader.abt
MicroWorld-eScanTrojan.GenericKD.66665308
RisingDownloader.Agent/VBS!8.10EA5 (TOPIS:E0:9Sf5OHRxCeD)
VIPRETrojan.GenericKD.66665308