supportdoc.xxls

Classification: Malicious

supportdoc.xxls is a malicious file sample (application/x-dosexec). Detected by 16 antivirus engines. Linked to Trickbot malware.

Detection summary

  • 16 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: TRICKBOT (S0266)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
TrickBot Abuse.ch 2021-02-17 17:42:01 2021-02-17 17:42:01 malicious-activity S0266 TrickBot

Sample information

Filenames
supportdoc.xxls
File type
application/x-dosexec
MD5
5ed8ba344e7e14a158994bccc1d96882
SHA-1
97161441a9e2eb5b740ba25aea3b002b196baa13
SHA-256
e1b67bd8b15bcd422fcbc74fa3b691c40c527ffedc951a6bb8e67ca257240d16
First indexed
2021-02-17 19:15:13
Last updated
2026-10-09 00:37:45

Antivirus detections

EngineDetection
Elasticmalicious (high confidence)
McAfeeArtemis!5ED8BA344E7E
CrowdStrikewin/malicious_confidence_100% (W)
SymantecML.Attribute.HighConfidence
APEXMalicious
Paloaltogeneric.ml
KasperskyUDS:DangerousObject.Multi.Generic
RisingTrojan.Trickpak!8.122C7 (CLOUD)
McAfee-GW-EditionBehavesLike.Win32.BadFile.jc
FireEyeGeneric.mg.5ed8ba344e7e14a1
SophosML/PE-A
WebrootW32.Trojan.Gen
ZoneAlarmUDS:DangerousObject.Multi.Generic
CynetMalicious (score: 100)
SentinelOneStatic AI - Malicious PE
BitDefenderThetaGen:NN.ZedlaF.34574.Qq4@aG9Ji5d