NewBCtestnDll32.dll

Classification: Malicious

NewBCtestnDll32.dll is a trojan (Windows executable, 21.1 KB). Flagged by 56% of antivirus engines (40 detections). Linked to Trickbot, Conti malware.

Detection summary

  • 40 antivirus detections (56% detection ratio)
  • 0 IDS alerts
  • 5 processes observed
  • 1 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: TRICKBOT (S0266) CONTI (S0575)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Conti Abuse.ch 2021-01-08 14:58:20 2021-01-08 14:58:20 malicious-activity S0575 Conti
Gen:Variant.Trickbot Hybrid-Analysis 2020-11-09 20:17:03 2020-11-09 20:17:03 S0266 TrickBot

Sample information

Filenames
NewBCtestnDll32.dll, tmp42azyw46
File type
PE32 executable (DLL) (GUI) Intel 80386, for MS Wi ...
Size
21640 bytes
MD5
097625fd580ec1ee057fdf029ac8e1f5
SHA-1
3e7707f3d03b7b5899249f6ccd84a0d2ba760c16
SHA-256
e07316969b2d2941e9ec6a940d03d03bd36527dae825f30265fd5221a858fca4
First indexed
2020-11-09 20:17:03
Last updated
2026-09-24 08:27:47

Antivirus detections

EngineDetection
BkavW32.AIDetectVM.malware1
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Trickbot.18
FireEyeGeneric.mg.097625fd580ec1ee
CAT-QuickHealTrojan.Trickster
ALYacGen:Variant.Trickbot.18
CylanceUnsafe
ZillyaTrojan.TrickBot.Win32.2147
K7AntiVirusTrojan ( 0054ce561 )
K7GWTrojan ( 0054ce561 )
CrowdStrikewin/malicious_confidence_100% (D)
APEXMalicious
AvastWin32:Trojan-gen
ClamAVWin.Malware.Trickbot_module-6735723-0
KasperskyHEUR:Trojan.Win32.Trickster.gen
BitDefenderGen:Variant.Trickbot.18
NANO-AntivirusTrojan.Win32.Trickster.hzqfpf
Ad-AwareGen:Variant.Trickbot.18
EmsisoftGen:Variant.Trickbot.18 (B)
F-SecureTrojan.TR/TrickBot.fpwdd
VIPRETrojan.Win32.Generic!BT
TrendMicroTrojanSpy.Win32.TRICKBOT.SMZM3
McAfee-GW-EditionTrojan-FTAQ!097625FD580E
GDataGen:Variant.Trickbot.18
AviraTR/TrickBot.fpwdd
ArcabitTrojan.Trickbot.18
ZoneAlarmHEUR:Trojan.Win32.Trickster.gen
MicrosoftTrojan:Win32/Trickbot!Mod
CynetMalicious (score: 100)
McAfeeTrojan-FTAQ!097625FD580E
MAXmalware (ai score=88)
MalwarebytesTrojan.TrickBot
ESET-NOD32a variant of Win32/TrickBot.CB
TrendMicro-HouseCallTrojanSpy.Win32.TRICKBOT.SMZM3
RisingTrojan.TrickBot!1.CDB1 (CLASSIC)
YandexTrojan.Trickster!n+ysIG7VENA
FortinetW32/TrickBot.DF!tr
BitDefenderThetaGen:NN.ZedlaF.34590.bu5@aqBvIupi
AVGWin32:Trojan-gen
PandaTrj/GdSda.A

Network contacts

172.217.204.127

Process list

NameCommand line
<Ignored Process>
rundll32.exe"C:\tmp42azyw46.dll",#1
rundll32.exe"C:\tmp42azyw46.dll",#2
rundll32.exe"C:\tmp42azyw46.dll",#3
rundll32.exe"C:\tmp42azyw46.dll",#4