Insurance_template.rtf

Classification: Malicious

Insurance_template.rtf is a trojan (text/rtf). Detected by 28 antivirus engines. Linked to Bazar malware. 2 sightings from Abuse.ch, last seen 2021-12-14.

Detection summary

  • 28 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: BAZAR (S0534)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
BazaLoader Abuse.ch 2021-12-14 00:07:32 2021-12-14 00:07:32 malicious-activity S0534 Bazar
Generic.Malware Abuse.ch 2021-12-14 00:07:32 2021-12-14 00:07:32 malicious-activity

Sample information

Filenames
Insurance_template.rtf
File type
text/rtf
MD5
9da434878983cb4b9ea5840db8f19c67
SHA-1
b9c60d4fd9e8f750745a5dc1ecf470b70a3fd17b
SHA-256
df9b0956f7c6fae82c190f73bc70039d019acff0ce302928e9b66b599e8bde75
First indexed
2021-12-14 01:15:03
Last updated
2026-08-24 07:14:31

Antivirus detections

EngineDetection
CAT-QuickHealRTF.Emb.Gen
CynetMalicious (score: 99)
VIPRELooksLike.RTF.Malware.a (v)
McAfee-GW-EditionBehavesLike.Shellcode.hx
AviraHEUR/AGEN.1146010
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
TACHYONSuspicious/RTF.Agent.Gen
IkarusWin32.SuspectCrc
CyrenRTF/Trojan.VJPU-1
SymantecTrojan.Gen.NPE
ESET-NOD32Win64/BazarLoader.BK
TrendMicro-HouseCallTrojanSpy.Win64.BAZARLOADER.YXBLNZ
AvastWin64:Trojan-gen
KasperskyHEUR:Trojan.RTF.Alien.gen
BitDefenderTrojan.GenericKD.38274819
MicroWorld-eScanTrojan.GenericKD.38272842
Ad-AwareTrojan.GenericKD.38274819
SophosMal/Generic-S
TrendMicroTrojanSpy.Win64.BAZARLOADER.YXBLNZ
FireEyeTrojan.GenericKD.38272842
EmsisoftTrojan.GenericKD.38272842 (B)
MicrosoftTrojan:Win64/Sabsik!MTB
GDataTrojan.GenericKD.38274819
AhnLab-V3Trojan/Win.BazaLoader.C4848028
McAfeeRDN/GenericAC
MAXmalware (ai score=84)
FortinetW64/BazarLoader.BK!tr
AVGWin64:Trojan-gen