blpKkwH.dll
Classification: Malicious
blpKkwH.dll is a trojan (application/x-dosexec). Detected by 55 antivirus engines. Linked to Icedid malware. 3 sightings from Abuse.ch, last seen 2020-12-11.
Detection summary
- 55 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: ICEDID (S0483)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| IcedID | Abuse.ch | 2020-12-11 19:44:24 | 2020-12-11 19:44:24 | malicious-activity | S0483 IcedID |
Sample information
- Filenames
- blpKkwH.dll
- File type
- application/x-dosexec
- MD5
3c72bce52bdc984795ad8970ea9b451b- SHA-1
708f02368cd5599b5e7d004159be88a99c3f3b12- SHA-256
e701400c16f68cd770c21a9a8df8785dda0f1e5658d9fa1f3e5b1ac778d8e6bc- First indexed
- 2020-12-11 21:15:05
- Last updated
- 2026-10-09 00:13:37
Antivirus detections
| Engine | Detection |
|---|---|
| Bkav | W32.AIDetectVM.malware1 |
| Cynet | Malicious (score: 100) |
| APEX | Malicious |
| Rising | [email protected] (RDML:pVsPDl6lgK9gxup9xpVe/g) |
| Webroot | W32.Malware.Gen |
| ALYac | Trojan.IcedID.gen |
| AVG | Win32:Trojan-gen |
| Ad-Aware | Gen:Variant.Zusy.358281 |
| AhnLab-V3 | Malware/Win32.Generic.C4264041 |
| Alibaba | TrojanBanker:Win32/IcedId.776750a8 |
| Arcabit | Trojan.Zusy.D57789 |
| Avast | Win32:Trojan-gen |
| Avira | TR/AD.IcedId.tbxxr |
| BitDefender | Gen:Variant.Zusy.358281 |
| Comodo | Malware@#17afj2whf291m |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cyren | W32/Trojan.SQUQ-6785 |
| DrWeb | Trojan.Siggen11.54992 |
| ESET-NOD32 | a variant of Win32/Kryptik.HIGE |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Variant.Zusy.358281 (B) |
| FireEye | Gen:Variant.Zusy.358281 |
| Fortinet | W32/Generik.BCNHWXR!tr |
| GData | Gen:Variant.Zusy.358281 |
| Gridinsoft | Trojan.Win32.Gen.oa |
| Ikarus | Trojan.SuspectCRC |
| Jiangmin | Trojan.Banker.Cridex.amj |
| K7AntiVirus | Trojan ( 0057494a1 ) |
| K7GW | Trojan ( 0057494a1 ) |
| Kaspersky | HEUR:Trojan-Banker.Win32.Cridex.gen |
| Kingsoft | Win32.Troj.Banker.(kcloud) |
| MAX | malware (ai score=81) |
| Malwarebytes | Trojan.Injector |
| MaxSecure | Trojan.Malware.74474672.susgen |
| McAfee | GenericRXMZ-SM!3C72BCE52BDC |
| McAfee-GW-Edition | GenericRXMZ-SM!3C72BCE52BDC |
| MicroWorld-eScan | Gen:Variant.Zusy.358281 |
| Microsoft | Trojan:Win32/IcedId.MR!MTB |
| NANO-Antivirus | Trojan.Win32.Cridex.iksuav |
| Paloalto | generic.ml |
| Panda | Trj/GdSda.A |
| Qihoo-360 | Win32/Trojan.Dridex.HgkASOcA |
| Rising | Trojan.GenKryptik!8.AA55 (CLOUD) |
| Sangfor | Trojan.Win32.Save.a |
| Sophos | Mal/Generic-S |
| Symantec | Ransom.Cry |
| Tencent | Malware.Win32.Gencirc.11b5f4db |
| TrendMicro | TROJ_GEN.R002C0DLF20 |
| TrendMicro-HouseCall | TROJ_GEN.R002C0DLF20 |
| VBA32 | TrojanBanker.Cridex |
| VIPRE | Trojan.Win32.Generic!BT |
| Yandex | Trojan.Kryptik!4LREFUDWKMc |
| Zillya | Trojan.Cridex.Win32.1320 |
| ZoneAlarm | HEUR:Trojan-Banker.Win32.Cridex.gen |