chester.dll
Classification: Malicious
chester.dll is a trojan (application/x-dosexec). Detected by 32 antivirus engines. Linked to Trickbot malware. 4 sightings, last seen 2021-05-06.
Detection summary
- 32 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: TRICKBOT (S0266)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| TrickBot | Abuse.ch | 2021-05-06 20:48:46 | 2021-05-06 20:48:46 | malicious-activity | S0266 TrickBot |
Sample information
- Filenames
- chester.dll
- File type
- application/x-dosexec
- MD5
ac2b2336004ae55d79e225ae4634b9ca- SHA-1
a2399efd6b0c947820433f5b48542b61ce16f485- SHA-256
e2bba9e894cef89fd6b12d8c2bf19a139e0fd6a3e91684385f84866a6a10d5d8- First indexed
- 2021-05-06 23:15:13
- Last updated
- 2026-10-09 00:32:51
Antivirus detections
| Engine | Detection |
|---|---|
| Bkav | W32.AIDetect.malware2 |
| Elastic | malicious (high confidence) |
| MicroWorld-eScan | Trojan.GenericKD.46158275 |
| FireEye | Generic.mg.ac2b2336004ae55d |
| McAfee | Artemis!AC2B2336004A |
| Sangfor | Riskware.Win32.Wacapew.C |
| K7AntiVirus | Trojan ( 0057b4991 ) |
| K7GW | Trojan ( 0057b4991 ) |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Symantec | Trojan.Gen.2 |
| ESET-NOD32 | a variant of Win32/Kryptik.HKNZ |
| APEX | Malicious |
| Avast | Win32:Malware-gen |
| BitDefender | Trojan.GenericKD.46158275 |
| Ad-Aware | Trojan.GenericKD.46158275 |
| Emsisoft | Trojan.GenericKD.46158275 (B) |
| VIPRE | Trojan.Win32.Generic!BT |
| McAfee-GW-Edition | Artemis!Trojan |
| Sophos | Mal/Generic-S |
| Paloalto | generic.ml |
| GData | Trojan.GenericKD.46158275 |
| Webroot | W32.Malware.Gen |
| Avira | TR/Crypt.Agent.wfnqw |
| AegisLab | Trojan.Multi.Generic.4!c |
| Microsoft | Program:Win32/Wacapew.C!ml |
| Cynet | Malicious (score: 100) |
| AhnLab-V3 | Trojan/Win.Generic.C4435199 |
| MAX | malware (ai score=87) |
| Malwarebytes | Malware.AI.3861258088 |
| TrendMicro-HouseCall | TROJ_FRS.VSNW16D21 |
| Fortinet | W32/PossibleThreat |
| AVG | Win32:Malware-gen |