_bd8203ab88983bc081545ff325f39e9c5cd5eb6a99d04ae2a6cf862535c9829a.fpx

Classification: Malicious

_bd8203ab88983bc081545ff325f39e9c5cd5eb6a99d04ae2a6cf862535c9829a.fpx is a malicious file sample (Office document). Linked to Tsundere Botnet malware.

Detection summary

  • 0 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 2 contacted hosts
  • 3 DNS requests

MITRE ATT&CK associations

Malware families: TSUNDERE BOTNET (S9034)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Dindoor Triage 2026-03-13 04:58:54 2026-03-13 04:58:54 malicious-activity S9034 Tsundere Botnet
Generic Malware Hybrid-Analysis 2026-03-04 14:45:05 2026-03-04 14:45:05
Generic Malware Triage 2026-02-17 19:12:52 2026-03-04 14:05:03 malicious-activity

Tags

execution persistence privilege_escalation ransomware spyware stealer dindoor backdoor rat trojan

Sample information

Filenames
bd8203ab88983bc081545ff325f39e9c5cd5eb6a99d04ae2a6cf862535c9829a, _bd8203ab88983bc081545ff325f39e9c5cd5eb6a99d04ae2a6cf862535c9829a.fpx, bd8203ab88983bc081545ff325f39e9c5cd5eb6a99d04ae2a6cf862535c9829a.bin
File type
Composite Document File V2 Document, Little Endian ...
MD5
ca37e31d651bbd5bbddef3ea716b8b4f
SHA-1
de9707a8505683930fccf5536e311242425d420a
SHA-256
bd8203ab88983bc081545ff325f39e9c5cd5eb6a99d04ae2a6cf862535c9829a
SHA-512
f11b778a3af05a7ed9b0d8b3779f306dac0c59ec04db9bffca5d7280fd414e9018fa8ac929dd8a9e294706b7c25d0293be49f9829b5e574568a02a8f58136879
First indexed
2026-02-17 19:12:52
Last updated
2026-09-19 06:11:42

Network contacts

69.67.170.170 172.67.198.112

DNS requests

deno.com deno.land dl.deno.land