Marzo.ppa

Classification: Malicious

Marzo.ppa is a trojan (Powerpoint_Document). Detected by 39 antivirus engines. Linked to Ursnif malware. 2 sightings, last seen 2023-03-01.

Detection summary

  • 39 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: URSNIF (S0386)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Gozi MalwareBazaar Abuse.ch 2023-03-01 10:18:24 2023-03-01 10:18:24 S0386 Ursnif

Sample information

Filenames
ca6cca63731e86074f4b715fd5ff280771c7478aa9e336267e8cc95cdf4905fe.ppt, Marzo.ppa
File type
Powerpoint_Document
MD5
a7b9fa984e5fc897da9871f5efea2aad
SHA-1
a1e4a02b1fb617ede5dba236642eedd7eb24df93
SHA-256
ca6cca63731e86074f4b715fd5ff280771c7478aa9e336267e8cc95cdf4905fe
First indexed
2023-03-01 10:18:24
Last updated
2026-10-09 02:18:57

Antivirus detections

EngineDetection
ALYacTrojan.Downloader.PPT.Agent
AVGOther:Malware-gen [Trj]
Acronissuspicious
Antiy-AVLTrojan/MSOffice.SAgent
ArcabitTrojan.Generic.D3EF21D7
AvastOther:Malware-gen [Trj]
AviraW2000M/Agent.9401728
BitDefenderTrojan.GenericKD.66003415
CAT-QuickHealO97M.Downloader.39000
CTXppt.trojan.sagent
CynetMalicious (score: 99)
DrWebW97M.DownLoader.6537
ESET-NOD32VBA/TrojanDownloader.Agent.YVH trojan
Elasticmalicious (high confidence)
EmsisoftTrojan.GenericKD.66003415 (B)
F-SecureMalware.W2000M/Agent.9401728
FortinetVBA/Agent.YVH!tr.dldr
GDataTrojan.GenericKD.66003415
GoogleDetected
IkarusTrojan-Downloader.VBA.Agent
KasperskyHEUR:Trojan.MSOffice.SAgent.gen
LionicTrojan.MSPPoint.SAgent.4!c
MicroWorld-eScanTrojan.GenericKD.66003415
MicrosoftTrojanDownloader:O97M/Ursnif.RVF!MTB
NANO-AntivirusTrojan.Ole2.Vbs-heuristic.druvzi
RisingDownloader.Agent/VBA!8.109E7 (TOPIS:E0:aVB6EADm59Q)
SentinelOneStatic AI - Malicious OLE
SkyhighBehavesLike.OLE2.Bad-VBA.qx
SymantecTrojan.Gen.NPE
TACHYONSuspicious/X97M.XSR.Gen
TencentWin32.Trojan-Downloader.Der.Jcnw
TrellixENSRDN/Ursnif
TrendMicroTROJ_FRS.0NA103J323
TrendMicro-HouseCallTROJ_FRS.0NA103J323
VIPRETrojan.GenericKD.66003415
VaristPP97M/Downldr.YE.gen!Eldorado
ViRobotPPT.Z.Agent.55808.K
alibabacloudTrojan[downloader]:MSOffice/Ursnif.RY!2XJC
huorongHEUR:OMacro/Autoex.a