bd2097055380b96c62f39e1160d260122551fa50d1eccdc70390958af56ac003

Classification: Malicious

bd2097055380b96c62f39e1160d260122551fa50d1eccdc70390958af56ac003 is a trojan (Windows executable, 1.8 MB). Linked to Shamoon malware.

Detection summary

  • 95 antivirus detections (83% detection ratio)
  • 0 IDS alerts
  • 1 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: SHAMOON (S0140)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Trojan.DistTrack Hybrid-Analysis 2020-04-20 16:30:12 2020-04-20 16:30:12 S0140 Shamoon

Tags

apt copykittens matryoshka shamoon slayerkitten

Sample information

Filenames
bd2097055380b96c62f39e1160d260122551fa50d1eccdc70390958af56ac003.exe
File type
PE32 executable (console) Intel 80386, for MS Windows
Size
1921024 bytes
MD5
001d216ee755f0bc96125892e2fb3e3a
SHA-1
51d7b351e70f2465832e7adad56429ad2a8a3e81
SHA-256
bd2097055380b96c62f39e1160d260122551fa50d1eccdc70390958af56ac003
First indexed
2020-04-20 16:30:12
Last updated
2026-09-26 19:44:37

Antivirus detections

EngineDetection
MicroWorld-eScanTrojan.GenericKD.40832935
FireEyeGeneric.mg.001d216ee755f0bc
CAT-QuickHealTrojan.DistTrack.S4607608
ALYacTrojan.DistTrack.A
K7AntiVirusTrojan ( 0051a67e1 )
AlibabaTrojan:Win32/Daptrk.f4d87367
K7GWTrojan ( 0051a67e1 )
Cybereasonmalicious.ee755f
TrendMicroTrojan.Win32.DISTTRACK.AA
BitDefenderThetaGen:NN.ZexaF.34090.1vW@auE3UKpG
CyrenW32/Trojan.WARC-7997
SymantecW32.Disttrack.B
ESET-NOD32a variant of Win32/DistTrack.E
APEXMalicious
Paloaltogeneric.ml
ClamAVWin.Dropper.DistTrack-5744784-0
GDataTrojan.GenericKD.40832935
KasperskyTrojan.Win32.Agent.qwhuag
BitDefenderTrojan.GenericKD.40832935
NANO-AntivirusTrojan.Win32.DistTrack.flcksd
AvastWin32:Trojan-gen
Ad-AwareTrojan.GenericKD.40832935
EmsisoftTrojan.GenericKD.40832935 (B)
ComodoMalware@#tqj8wqo8s4sz
F-SecureHeuristic.HEUR/AGEN.1028839
DrWebTrojan.Siggen7.64482
Invinceaheuristic
McAfee-GW-EditionBehavesLike.Win32.MultiPlug.tc
Trapminemalicious.high.ml.score
CMCTrojan-Downloader.Win32.Gamarue.2!O
SophosTroj/Wonton-AES
F-ProtW32/Disttrack.A
JiangminTrojan.Agent.bsnp
MaxSecureTrojan.Malware.73995367.susgen
AviraHEUR/AGEN.1028839
ArcabitTrojan.Generic.D26F0FA7
ZoneAlarmTrojan.Win32.Agent.qwhuag
AhnLab-V3Trojan/Win32.DistTrack.C2892492
McAfeeTrojan-Wiper!001D216EE755
MAXmalware (ai score=100)
VBA32Trojan.Agent
TrendMicro-HouseCallTrojan.Win32.DISTTRACK.AA
TencentWin32.Trojan.Agent.Kj
YandexTrojan.Agent!kTf4SEeqiSk
SentinelOneDFI - Suspicious PE
eGambitTrojan.Generic
FortinetW32/DistTrack.E!tr
WebrootW32.Malware.Gen
AVGWin32:Trojan-gen
PandaTrj/GdSda.A
CrowdStrikewin/malicious_confidence_100% (W)
Qihoo-360Win32/Trojan.d8c
AVGWin32:MalwareX-gen [Misc]
AlibabaTrojan:Win32/Shamoon.e99835cd
ArcabitTrojan.Graftor.D83B00
AvastWin32:MalwareX-gen [Misc]
AviraHEUR/AGEN.1317063
BitDefenderGen:Variant.Graftor.539392
BkavW32.AIDetectMalware
CTXexe.trojan.disttrack
CylanceUnsafe
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
ESET-NOD32Win32/DistTrack.E trojan
Elasticmalicious (high confidence)
EmsisoftGen:Variant.Graftor.539392 (B)
F-SecureHeuristic.HEUR/AGEN.1317063
GDataGen:Variant.Graftor.539392
GoogleDetected
IkarusTrojan-Ransom.Locky
KingsoftWin32.Trojan.Shamoon.gen
LionicTrojan.Win32.DistTrack.4!c
MalwarebytesMalware.AI.2020897263
MaxSecureTrojan.Malware.335917010.susgen
McAfeeDti!BD2097055380
MicroWorld-eScanGen:Variant.Graftor.539392
MicrosoftTrojan:Win32/Daptrk
RisingTrojan.DistTrack!8.5DA6 (KTSE)
SangforSuspicious.Win32.Save.pkr
SentinelOneStatic AI - Suspicious PE
SkyhighBehavesLike.Win32.Injector.tc
SophosMal/Generic-S
SymantecML.Attribute.HighConfidence
TencentMalware.Win32.Gencirc.146abd19
TrellixENSTrojan-Wiper!001D216EE755
VIPREGen:Variant.Graftor.539392
VaristW32/Disttrack.ZUZT-1755
VirITTrojan.Win32.Shamoon.C
XcitiumMalware@#tqj8wqo8s4sz
YandexTrojan.GenAsa!3+R4vmFBKDY
ZillyaTrojan.Agent.Win32.1030453
ZoneAlarmTroj/Wonton-AES
alibabacloudTrojan:Win/DistTrack.E
huorongTrojan/Generic!8A88898DD9542B9D
tehtrisGeneric.Malware

Process list

NameCommand line
bd2097055380b96c62f39e1160d260122551fa50d1eccdc70390958af56ac003.exe