c0e7779d3ee55e9d37636184c44671d1a778d6a81513efba0a325143bf4d6d2b
Classification: Malicious
c0e7779d3ee55e9d37636184c44671d1a778d6a81513efba0a325143bf4d6d2b is a trojan (application/vnd.ms-excel). Detected by 47 antivirus engines.
Detection summary
- 47 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Intrusion sets: TA505 (G0092)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| TA505 | Abuse.ch | 2020-12-18 07:33:47 | 2020-12-18 07:33:47 | malicious-activity | G0092 TA505 |
Sample information
- Filenames
- 9909775be4d2e9cd06957e9819e77d0e.xls
- File type
- application/vnd.ms-excel
- MD5
9909775be4d2e9cd06957e9819e77d0e- SHA-1
130512f34f289b8d90d0d16e7813efa6c85be12e- SHA-256
c0e7779d3ee55e9d37636184c44671d1a778d6a81513efba0a325143bf4d6d2b- First indexed
- 2020-12-18 10:15:10
- Last updated
- 2026-08-30 05:00:12
Antivirus detections
| Engine | Detection |
|---|---|
| Elastic | malicious (high confidence) |
| MicroWorld-eScan | Trojan.GenericKD.35758192 |
| FireEye | Trojan.GenericKD.35758192 |
| CAT-QuickHeal | OLE.Downloader.39983 |
| McAfee | W97M/Downloader.dds |
| BitDefenderTheta | Gen:NN.ZedlaF.34700.yu4@aqDqPBg |
| Cyren | X97M/Agent.OY.gen!Eldorado |
| Symantec | Scr.Malcode!gen |
| TrendMicro-HouseCall | Trojan.W97M.GRACEWIRE.SMTH |
| Avast | Win64:CrypterX-gen [Trj] |
| ClamAV | Xls.Packed.Logan-9738662-0 |
| Kaspersky | HEUR:Trojan.Script.Generic |
| BitDefender | Trojan.GenericKD.35758192 |
| NANO-Antivirus | Trojan.Ole2.Vbs-heuristic.druvzi |
| Rising | Dropper.StealthLoader/VBA!1.C75E (CLASSIC:4:C2a7idCOBrG) |
| Ad-Aware | Trojan.GenericKD.35758192 |
| Emsisoft | Trojan.GenericKD.35758192 (B) |
| F-Secure | Trojan.TR/Kryptik.tokxa |
| TrendMicro | Trojan.W97M.GRACEWIRE.SMTH |
| McAfee-GW-Edition | BehavesLike.OLE2.Downloader.jb |
| Sophos | Mal/Generic-S |
| GData | Trojan.GenericKD.35758192 |
| Avira | TR/Kryptik.tokxa |
| MAX | malware (ai score=84) |
| Arcabit | Trojan.Bulz.D423D7 |
| ZoneAlarm | HEUR:Trojan.Script.Generic |
| Microsoft | TrojanDropper:O97M/GraceWire.ARJ!MTB |
| Cynet | Malicious (score: 85) |
| AhnLab-V3 | Trojan/Win64.Reflect.C4265248 |
| ESET-NOD32 | a variant of VBA/TrojanDropper.Agent.BMD |
| Ikarus | Win32.Outbreak |
| Fortinet | VBA/Agent.BMD!tr |
| AVG | Win64:CrypterX-gen [Trj] |
| Qihoo-360 | virus.office.qexvmc.1065 |
| ALYac | Trojan.GenericKD.35758192 |
| Ad-Aware | VBA:Logan.891 |
| Arcabit | Trojan.Generic.D221A070 |
| BitDefender | VBA:Logan.891 |
| Cyren | W32/Trojan.UUKE-4976 |
| Emsisoft | VBA:Logan.891 (B) |
| FireEye | VBA:Logan.891 |
| GData | VBA:Logan.891 |
| Ikarus | Trojan-Dropper.VBA.Agent |
| Lionic | Trojan.Script.Generic.4!c |
| MAX | malware (ai score=100) |
| MicroWorld-eScan | VBA:Logan.891 |
| ViRobot | XLS.Z.Agent.686592.C |