d9b7dd08b2d1cde2e076ec3c10948af1a472a610fa7e3179f4e6b42402870b31

Classification: Malicious

d9b7dd08b2d1cde2e076ec3c10948af1a472a610fa7e3179f4e6b42402870b31 is a trojan (application/vnd.openxmlformats-officedo…). Detected by 47 antivirus engines.

Detection summary

  • 47 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: BAZAR (S0534)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
BazaLoader Abuse.ch 2021-11-10 16:49:01 2021-11-10 16:49:01 malicious-activity S0534 Bazar
Generic.Malware Abuse.ch 2021-11-10 16:49:01 2021-11-10 16:49:01 malicious-activity

Sample information

Filenames
d9b7dd08b2d1cde2e076ec3c10948af1a472a610fa7e3179f4e6b42402870b31
File type
application/vnd.openxmlformats-officedocument.wordprocessingml.document
MD5
8053242252f245ba7ae93ff4b8567e97
SHA-1
e128e06c41af62bd956bc38d8bcc75e5db3a2025
SHA-256
d9b7dd08b2d1cde2e076ec3c10948af1a472a610fa7e3179f4e6b42402870b31
First indexed
2021-11-10 18:15:09
Last updated
2026-04-27 06:13:17

Antivirus detections

EngineDetection
Elasticmalicious (high confidence)
SangforVirus.Macro.Generic.Save
CyrenPP97M/Agent.ADW.gen!Eldorado
SymantecISB.Downloader!gen148
KasperskyHEUR:Trojan.MSOffice.SAgent.gen
NANO-AntivirusTrojan.Ole2.Vbs-heuristic.druvzi
F-SecureHeuristic.HEUR/Macro.Downloader.MRAJB.Gen
McAfee-GW-EditionBehavesLike.GenDownloader.nc
IkarusTrojan-Downloader.VBA.Agent
McAfeeW97M/Downloader.dkf
TACHYONSuspicious/WOX.XSR.Gen
SentinelOneStatic AI - Malicious OPENXML
FortinetVBA/Agent.DKF!tr.dldr
ALYacVB:Trojan.Valyria.5642
AVGVBA:Dropper-GV [Trj]
AlibabaTrojan:Win32/MalDoc.ali1000158
Antiy-AVLTrojan[Downloader]/MSOffice.Agent
ArcabitVB:Trojan.Valyria.D160A
AvastVBA:Dropper-GV [Trj]
AviraHEUR/Macro.Downloader.MRAJB.Gen
BitDefenderVB:Trojan.Valyria.5642
CAT-QuickHealO97M.Downloader.44834
CTXdocx.trojan.generic
ClamAVDoc.Downloader.IcedID-8ff0f02ff0876072-9950256-0
CynetMalicious (score: 99)
ESET-NOD32VBA/TrojanDropper.Agent.DBG
EmsisoftVB:Trojan.Valyria.5642 (B)
FortinetVBA/Agent.CJO!tr
GDataVB:Trojan.Valyria.5642
GoogleHighly Suspicious
KasperskyUDS:DangerousObject.Multi.Generic
LionicTrojan.MSOffice.SAgent.4!c
MicroWorld-eScanVB:Trojan.Valyria.5642
MicrosoftTrojanDropper:O97M/IcedID.PEZ!MTB
RisingDropper.Agent/VBA!8.11766 (TOPIS:E0:uGQmeDdUu1P)
SkyhighW97M/Dropper.in
SophosTroj/DocDl-AERT
SymantecScr.Malcode!gen
TencentTrojan.MsOffice.MacroS.11015505
TrellixENSW97M/Downloader.dkf
TrendMicro-HouseCallTrojan.W97M.DLOADR.SMK
VIPREVB:Trojan.Valyria.5642
VaristPP97M/Agent.ADW.gen!Eldorado
VirITOffice.VBA_Macro_Heur
XcitiumMalware@#xya8xs7kl5tl
ZoneAlarmTroj/DocDl-AERT
huorongOMacro/Dropper.gq