c5a8bfdcd3b429b6b7ae7803b231a8c9f7e063b000d7ffb06f5aab843bbf188c.doc

Classification: Malicious

c5a8bfdcd3b429b6b7ae7803b231a8c9f7e063b000d7ffb06f5aab843bbf188c.doc is a malicious file sample. Linked to Hancitor malware. Detected by 19 antivirus engines.

Detection summary

  • 19 antivirus detections
  • 0 IDS alerts
  • 1 processes observed
  • 0 contacted hosts
  • 1 DNS requests

MITRE ATT&CK associations

Malware families: HANCITOR (S0499)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2025-09-09 23:21:44 2025-09-10 02:30:13
Hancitor MalwareBazaar Abuse.ch 2022-01-26 15:50:04 2022-01-26 15:50:04 malicious-activity S0499 Hancitor
Generic.Malware MalwareBazaar Abuse.ch 2022-01-26 15:50:04 2022-01-26 15:50:04 malicious-activity

Tags

banker emotet lokibot

Sample information

Filenames
c5a8bfdcd3b429b6b7ae7803b231a8c9f7e063b000d7ffb06f5aab843bbf188c.doc, D1768Y2157.doc
File type
application/msword
Size
594944 bytes
MD5
37a771a001125047d4f15a0ca3df7ce4
SHA-1
067cfee987771e2a19db1404d88f57882ebd9943
SHA-256
c5a8bfdcd3b429b6b7ae7803b231a8c9f7e063b000d7ffb06f5aab843bbf188c
First indexed
2022-01-26 17:15:15
Last updated
2026-06-23 20:46:11

Antivirus detections

EngineDetection
LionicTrojan.Script.Generic.b!c
MicroWorld-eScanTrojan.GenericKD.48124056
SymantecTrojan.Gen.MBT
ESET-NOD32VBA/TrojanDownloader.Agent.XFH
TrendMicro-HouseCallTrojan.W97M.HANCITOR.YXCA1Z
KasperskyHEUR:Trojan-Dropper.Script.Generic
BitDefenderTrojan.GenericKD.48124056
Ad-AwareTrojan.GenericKD.48124056
DrWebExploit.Siggen3.25857
TrendMicroTrojan.W97M.HANCITOR.YXCA1Z
FireEyeTrojan.GenericKD.48124056
EmsisoftTrojan.GenericKD.48124056 (B)
IkarusTrojan.VB.Valyria
MAXmalware (ai score=83)
GDataTrojan.GenericKD.48124056
ZonerProbably Heur.W97Obfuscated
TencentHeur.Macro.Generic.b.a6fbcb24
SentinelOneStatic AI - Malicious OLE
FortinetVBA/Agent.2585!tr

DNS requests

tropitron5.ru

Process list

NameCommand line
WINWORD.EXE/n "C:\c5a8bfdcd3b429b6b7ae7803b231a8c9f7e063b000d7ffb06f5aab843bbf188c.doc"