SharedFiles.dll
Classification: Malicious
SharedFiles.dll is a trojan (application/x-dosexec). Detected by 82 antivirus engines. Linked to Bazar malware. 2 sightings, last seen 2021-10-26.
Detection summary
- 82 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: BAZAR (S0534)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| BazaLoader | Abuse.ch | 2021-10-26 11:06:55 | 2021-10-26 11:06:55 | malicious-activity | S0534 Bazar |
| Generic.Malware | Abuse.ch | 2021-10-26 11:06:55 | 2021-10-26 11:06:55 | malicious-activity |
Sample information
- Filenames
- SharedFiles.dll
- File type
- application/x-dosexec
- MD5
fb88f4d22f14ca09ddeeca5d312f4d9f- SHA-1
734205a694689db504418101b91c9981e3a12deb- SHA-256
c17e71c7ae15fdb02a4e22df4f50fb44215211755effd6e3fc56e7f3e586b299- First indexed
- 2021-10-26 12:15:06
- Last updated
- 2026-08-30 01:54:28
Antivirus detections
| Engine | Detection |
|---|---|
| Lionic | Trojan.Win32.Inject.4!c |
| Elastic | malicious (high confidence) |
| Cynet | Malicious (score: 100) |
| McAfee | RDN/Generic.rp |
| Sangfor | Trojan.Win32.Inject.anvyn |
| K7AntiVirus | Trojan ( 005897ca1 ) |
| Alibaba | Trojan:Win64/Generic.1892dbaa |
| K7GW | Trojan ( 005897ca1 ) |
| CrowdStrike | win/malicious_confidence_70% (W) |
| Cyren | W64/Bzrloader.I!Eldorado |
| Symantec | Trojan.Gen.2 |
| ESET-NOD32 | Win64/Agent.AVH |
| Paloalto | generic.ml |
| Kaspersky | Trojan.Win32.Inject.anvyn |
| BitDefender | Trojan.GenericKD.37874819 |
| ViRobot | Trojan.Win32.Z.Agent.615456 |
| MicroWorld-eScan | Trojan.GenericKD.37874819 |
| Avast | Win64:TrojanX-gen [Trj] |
| Ad-Aware | Trojan.GenericKD.37874819 |
| Emsisoft | Trojan.GenericKD.37874819 (B) |
| F-Secure | Trojan.TR/Agent.wmvvx |
| DrWeb | BackDoor.Siggen2.3618 |
| TrendMicro | TrojanSpy.Win64.BAZARLOADER.YXBJZZ |
| McAfee-GW-Edition | RDN/Generic.rp |
| FireEye | Trojan.GenericKD.37874819 |
| Sophos | Mal/Generic-S |
| Ikarus | Trojan.Win64.Agent |
| Kingsoft | Win32.Troj.Inject.(kcloud) |
| Microsoft | Trojan:Win32/Woreflint.A!cl |
| GData | Trojan.GenericKD.37874819 |
| AhnLab-V3 | Trojan/Win.Agent.R447389 |
| ALYac | Trojan.Agent.Bazar |
| MAX | malware (ai score=80) |
| Cylance | Unsafe |
| TrendMicro-HouseCall | TrojanSpy.Win64.BAZARLOADER.YXBJZZ |
| SentinelOne | Static AI - Malicious PE |
| Fortinet | W64/Agent.AWG!tr |
| AVG | Win64:TrojanX-gen [Trj] |
| Panda | Trj/CI.A |
| APEX | Malicious |
| AVG | Win64:MalwareX-gen [Trj] |
| Alibaba | Trojan:Win64/Tnega.9780d706 |
| Antiy-AVL | Trojan/Win32.Casdet |
| Arcabit | Trojan.Ulise.D4D52B |
| Avast | Win64:MalwareX-gen [Trj] |
| Avira | TR/W64.MalwareX |
| BitDefender | Gen:Variant.Ulise.316715 |
| Bkav | W32.Malware.2C31EA87 |
| CAT-QuickHeal | Trojan.GenericRI.S24262591 |
| CTX | dll.trojan.tnega |
| CrowdStrike | win/malicious_confidence_100% (W) |
| DeepInstinct | MALICIOUS |
| ESET-NOD32 | Win64/Agent.AVH trojan |
| Emsisoft | Gen:Variant.Ulise.316715 (B) |
| F-Secure | Trojan.TR/W64.MalwareX |
| GData | Gen:Variant.Ulise.316715 |
| Jiangmin | Trojan.Agent.dqlu |
| K7AntiVirus | Trojan ( 005eac151 ) |
| K7GW | Trojan ( 005eac151 ) |
| Lionic | Trojan.Win32.Tnega.4!c |
| Malwarebytes | Crypt.Trojan.Malicious.DDS |
| MaxSecure | Trojan.Malware.222742875.susgen |
| McAfeeD | ti!C17E71C7AE15 |
| MicroWorld-eScan | Gen:Variant.Ulise.316715 |
| Microsoft | Trojan:Win64/Tnega.BZ!MTB |
| Rising | Trojan.Agent!8.B1E (TFE:5:BVtyvssoU5V) |
| SUPERAntiSpyware | Trojan.Agent/Gen-Agent |
| Sangfor | Trojan.Win64.Tnega.Ve4e |
| SentinelOne | Static AI - Suspicious PE |
| Skyhigh | BehavesLike.Win64.Dropper.jh |
| Symantec | Trojan Horse |
| Tencent | Malware.Win32.Gencirc.10bcc693 |
| TrellixENS | GenericRXAA-AA!FB88F4D22F14 |
| VBA32 | Trojan.Inject |
| VIPRE | Gen:Variant.Ulise.316715 |
| Varist | W64/BzrLoader.N.gen!Eldorado |
| Webroot | W32.Trojan.Gen |
| Xcitium | Malware@#1gk295zpfcq35 |
| Yandex | Trojan.Agent!BnQHvDFvFTc |
| ZoneAlarm | Troj/Bazar-Z |
| alibabacloud | Trojan:Win/Tnega.BO8PHU |
| huorong | VirTool/W64.Obfuscator.bq |