e385fa8c3991479cb9622a746e36f1d42b86ae0a808c856db2c64bb70fdf332f
Classification: Malicious
e385fa8c3991479cb9622a746e36f1d42b86ae0a808c856db2c64bb70fdf332f is a trojan (application/x-dosexec). Detected by 52 antivirus engines.
Detection summary
- 52 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: TRICKBOT (S0266)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| TrickBot | Abuse.ch | 2021-12-08 02:25:27 | 2021-12-08 02:25:27 | malicious-activity | S0266 TrickBot |
| Generic.Malware | Abuse.ch | 2021-12-08 02:25:27 | 2021-12-08 02:25:27 | malicious-activity |
Sample information
- Filenames
- fb77d82bd863a49f67fa8134dcc1581d
- File type
- application/x-dosexec
- MD5
fb77d82bd863a49f67fa8134dcc1581d- SHA-1
5f6096251b4b44fdb5817bf028c6be1392fc1421- SHA-256
e385fa8c3991479cb9622a746e36f1d42b86ae0a808c856db2c64bb70fdf332f- First indexed
- 2021-12-08 03:15:08
- Last updated
- 2026-10-15 04:00:45
Antivirus detections
| Engine | Detection |
|---|---|
| Bkav | W32.AIDetect.malware2 |
| Elastic | malicious (high confidence) |
| MicroWorld-eScan | Trojan.Agent.FQNG |
| FireEye | Generic.mg.fb77d82bd863a49f |
| McAfee | GenericRXAA-AA!FB77D82BD863 |
| Cylance | Unsafe |
| CrowdStrike | win/malicious_confidence_70% (D) |
| ESET-NOD32 | Win32/TrickBot.DX |
| Cynet | Malicious (score: 100) |
| Kaspersky | HEUR:Trojan.Win32.Trickpak.gen |
| BitDefender | Trojan.Agent.FQNG |
| Ad-Aware | Trojan.Agent.FQNG |
| Emsisoft | Trojan.Agent.FQNG (B) |
| Sophos | ML/PE-A |
| SentinelOne | Static AI - Suspicious PE |
| GData | Trojan.Agent.FQNG |
| MAX | malware (ai score=83) |
| Arcabit | Trojan.Agent.FQNG |
| APEX | Malicious |
| Fortinet | W32/TrickBot.DX!tr |
| Panda | Trj/GdSda.A |
| ALYac | Trojan.Agent.FQNG |
| AVG | Win32:BankerX-gen [Trj] |
| AhnLab-V3 | Trojan/Win.TrickBot.C4823806 |
| Alibaba | Trojan:Win32/TrickBotCrypt.745173e7 |
| Antiy-AVL | Trojan/Generic.ASMalwS.34E80E8 |
| Avast | Win32:BankerX-gen [Trj] |
| Avira | TR/TrickBot.qhueh |
| CrowdStrike | win/malicious_confidence_90% (W) |
| Cyren | W32/TrickBot.HD.gen!Eldorado |
| DrWeb | Trojan.DownLoader44.14071 |
| Emsisoft | Trojan.TrickBot (A) |
| Fortinet | W32/TRICKBOT.YXBK!tr |
| Ikarus | Trojan.Win32.Trickbot |
| Jiangmin | Trojan.Trickpak.mq |
| K7AntiVirus | Trojan ( 005795911 ) |
| K7GW | Trojan ( 005795911 ) |
| Kingsoft | Win32.Troj.Undef.(kcloud) |
| Malwarebytes | Trojan.TrickBot |
| McAfee | GenericRXRB-AI!FB77D82BD863 |
| McAfee-GW-Edition | Artemis!Trojan |
| Microsoft | Trojan:Win32/TrickBotCrypt.GO!MTB |
| Paloalto | generic.ml |
| Sophos | Mal/Generic-R + Troj/Trickb-DS |
| Symantec | ML.Attribute.HighConfidence |
| TACHYON | Trojan/W32.Trickpak.450560.B |
| Tencent | Malware.Win32.Gencirc.10cf9756 |
| TrendMicro | TrojanSpy.Win32.TRICKBOT.YXBLHZ |
| TrendMicro-HouseCall | TrojanSpy.Win32.TRICKBOT.YXBLHZ |
| VBA32 | Trojan.Trickpak |
| ViRobot | Trojan.Win32.Z.Trickbot.450560.E |
| Yandex | Trojan.Trickpak!uf2kgsjpBLg |