d30f306d4d866a07372b94f7657a7a2b0500137fe7ef51678d0ef4249895c2c5
Classification: Malicious
d30f306d4d866a07372b94f7657a7a2b0500137fe7ef51678d0ef4249895c2c5 is a trojan (Windows executable, 208.0 KB). Linked to Explosive malware. Seen in RO.
Detection summary
- 48 antivirus detections (71% detection ratio)
- 0 IDS alerts
- 2 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: EXPLOSIVE (S0569)
Where it has been seen
Observed by Maltiverse Threat Observatory sensors in RO.
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Cyber Threat Alliance | 2026-10-13 10:09:01 | 2026-10-13 10:09:01 | malicious-activity | |
| Explosive | Cyber Threat Alliance | 2026-10-05 15:44:11 | 2026-10-05 15:44:11 | country_code:ro malicious-activity | S0569 Explosive |
| Trojan.Explosive | Hybrid-Analysis | 2019-02-21 21:45:06 | 2019-02-21 21:45:06 |
Sample information
- Filenames
- sample.bin
- File type
- PE32 executable (GUI) Intel 80386, for MS Windows
- Size
- 212992 bytes
- MD5
6f11a67803e1299a22c77c8e24072b82- SHA-1
1f98454d9ba6d540a0b65420fc49a5949dfff4aa- SHA-256
d30f306d4d866a07372b94f7657a7a2b0500137fe7ef51678d0ef4249895c2c5- First indexed
- 2019-02-21 21:45:06
- Last updated
- 2019-02-21 21:45:06
Antivirus detections
| Engine | Detection |
|---|---|
| Bkav | W32.ExplosiveHokobotG.Trojan |
| MicroWorld-eScan | Gen:Variant.Zusy.135221 |
| CAT-QuickHeal | Trojan.Hokobot |
| McAfee | Generic.vu |
| Cylance | Unsafe |
| AegisLab | Trojan.Win32.Explosive.4!c |
| BitDefender | Gen:Variant.Zusy.135221 |
| K7GW | Trojan ( 004bb6551 ) |
| K7AntiVirus | Trojan ( 004bb6551 ) |
| TrendMicro | BKDR_EXPLOSIVE.A |
| NANO-Antivirus | Trojan.Win32.Explosive.dpyuyh |
| F-Prot | W32/Explosive.D.gen!Eldorado |
| Symantec | Trojan.Gen.MBT |
| TrendMicro-HouseCall | BKDR_EXPLOSIVE.A |
| Avast | Win32:Explosive-H [Trj] |
| ClamAV | Win.Trojan.Explosive-6538486-0 |
| GData | Gen:Variant.Zusy.135221 |
| Kaspersky | Trojan.Win32.Explosive.c |
| ViRobot | Trojan.Win32.Explosive.212992.A |
| Rising | Trojan.Agent!8.B1E (CLOUD) |
| Ad-Aware | Gen:Variant.Zusy.135221 |
| Sophos | Troj/Explos-D |
| DrWeb | Trojan.Explosiv.2 |
| Zillya | Trojan.Explosive.Win32.9 |
| McAfee-GW-Edition | BehavesLike.Win32.PWSZbot.dh |
| Emsisoft | Gen:Variant.Zusy.135221 (B) |
| Ikarus | Trojan.Win32.Hokobot |
| Cyren | W32/Explosive.D.gen!Eldorado |
| Webroot | W32.Trojan.GenKD |
| Avira | TR/Visucius.88 |
| MAX | malware (ai score=100) |
| Antiy-AVL | Trojan/Win32.Explosive |
| Microsoft | Trojan:Win32/Hokobot.A!dha |
| ZoneAlarm | Trojan.Win32.Explosive.c |
| AhnLab-V3 | Trojan/Win32.Agent.C779684 |
| VBA32 | Trojan.Explosive |
| ALYac | Gen:Variant.Zusy.135221 |
| Malwarebytes | Trojan.Agent.HKB |
| Panda | Trj/Explosive.A |
| Arcabit | Trojan.Zusy.D21035 |
| ESET-NOD32 | a variant of Win32/Agent.PTM |
| Tencent | Win32.Trojan.Explosive.Wpth |
| Yandex | Trojan.Explosive! |
| Fortinet | W32/Explosive.C!tr |
| AVG | Win32:Explosive-H [Trj] |
| Cybereason | malicious.803e12 |
| Paloalto | generic.ml |
| Qihoo-360 | Win32/Trojan.e5c |
Process list
| Name | Command line |
|---|---|
| sample.bin.exe | |
| WmiPrvSE.exe | |