SecuriteInfo.com.Suspicious.Win32.Save.a.5021.11809
Classification: Malicious
SecuriteInfo.com.Suspicious.Win32.Save.a.5021.11809 is a trojan (application/x-dosexec). Detected by 59 antivirus engines. Linked to Dridex malware.
Detection summary
- 59 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: DRIDEX (S0384)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Dridex | Abuse.ch | 2021-11-22 20:55:14 | 2021-11-22 20:55:14 | malicious-activity | S0384 Dridex |
Sample information
- Filenames
- SecuriteInfo.com.Suspicious.Win32.Save.a.5021.11809
- File type
- application/x-dosexec
- MD5
02d889bda607839696eca3ee83482dbf- SHA-1
735bc4e684821a7580e1fb70cacb71fd3acd4c49- SHA-256
bd5f765b253c9295e049fabc3926b1035b8637854262808a290641c6bedbf929- First indexed
- 2021-11-22 22:15:20
- Last updated
- 2026-10-12 02:15:23
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.Agent.FQDY |
| APEX | Malicious |
| AVG | Win32:BotX-gen [Trj] |
| AhnLab-V3 | Malware/Win.FJX.R452190 |
| Alibaba | TrojanDownloader:Win32/Cridex.c595593a |
| Antiy-AVL | Trojan/Win32.Generic |
| Arcabit | Trojan.Agent.FQDY |
| Avast | Win32:BotX-gen [Trj] |
| Avira | HEUR/AGEN.1302353 |
| BitDefender | Trojan.Agent.FQDY |
| Bkav | W32.AIDetectMalware |
| CAT-QuickHeal | Trojan.SabsikRI.S24918322 |
| CTX | dll.trojan.cridex |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Dridex.776 |
| ESET-NOD32 | a variant of Win32/Kryptik.HNNJ |
| Elastic | malicious (high confidence) |
| Emsisoft | Trojan.Crypt (A) |
| F-Secure | Heuristic.HEUR/AGEN.1302353 |
| FireEye | Generic.mg.02d889bda6078396 |
| Fortinet | W32/Dridex.GC!tr |
| GData | Trojan.Agent.FQDY |
| Detected | |
| Gridinsoft | Trojan.Heur!.02016020 |
| Ikarus | Trojan-Banker.Dridex |
| Jiangmin | TrojanDownloader.Cridex.amt |
| K7AntiVirus | Trojan ( 005690671 ) |
| K7GW | Trojan ( 005690671 ) |
| Kaspersky | Trojan-Downloader.Win32.Cridex.qgq |
| Kingsoft | malware.kb.a.992 |
| Lionic | Trojan.Win32.Cridex.14!c |
| MaxSecure | Trojan.Malware.130269298.susgen |
| McAfee | Drixed-FJX!02D889BDA607 |
| McAfeeD | ti!BD5F765B253C |
| MicroWorld-eScan | Trojan.Agent.FQDY |
| Microsoft | Trojan:Win32/Dridex.CE!MTB |
| NANO-Antivirus | Trojan.Win32.Cridex.jiefsj |
| Paloalto | generic.ml |
| Panda | Trj/Genetic.gen |
| Rising | Downloader.Cridex!8.F70 (TFE:1:4T6kAsD7FhT) |
| Sangfor | Suspicious.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Sophos | Mal/EncPk-APX |
| Symantec | Trojan.Gen.MBT |
| Tencent | Trojan-Downloader.Win32.Cridex.16000444 |
| TrendMicro | TROJ_FRS.0NA103KO21 |
| TrendMicro-HouseCall | TROJ_FRS.0NA103KO21 |
| VBA32 | TrojanDownloader.Cridex |
| VIPRE | Trojan.Agent.FQDY |
| Varist | W32/Dridex.GB.gen!Eldorado |
| Webroot | W32.Trojan.Dridex |
| Xcitium | Malware@#xfuk2zkvfex8 |
| Zillya | Trojan.Kryptik.Win32.3635780 |
| ZoneAlarm | Mal/EncPk-APX |
| alibabacloud | Trojan[downloader]:Win/Dridex.CA8PHU |
| huorong | VirTool/Obfuscator.aaf |