mon48_cr.dll
Classification: Malicious
mon48_cr.dll is a malicious file sample (application/x-dosexec). Detected by 8 antivirus engines. Linked to Trickbot malware.
Detection summary
- 8 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: TRICKBOT (S0266)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| TrickBot | Abuse.ch | 2021-02-12 00:13:52 | 2021-02-12 00:13:52 | malicious-activity | S0266 TrickBot |
| Generic.Malware | Abuse.ch | 2021-02-12 00:13:52 | 2021-02-12 00:13:52 | malicious-activity |
Sample information
- Filenames
- mon48_cr.dll
- File type
- application/x-dosexec
- MD5
48cab21fcbe254e7c83f4c1d455a39dc- SHA-1
b96c1f765abb14eb401cacab6f6e203c3a255df9- SHA-256
f1b9d5520ba13179e19b336e542d18b0bd9f39a2b41d88a739625c8480422b73- First indexed
- 2021-02-12 01:15:05
- Last updated
- 2026-10-08 23:30:40
Antivirus detections
| Engine | Detection |
|---|---|
| Elastic | malicious (high confidence) |
| Cynet | Malicious (score: 100) |
| Sangfor | Trojan.Win32.Save.a |
| APEX | Malicious |
| FireEye | Generic.mg.48cab21fcbe254e7 |
| Sophos | Generic ML PUA (PUA) |
| ESET-NOD32 | a variant of Win32/GenKryptik.FBOD |
| SentinelOne | Static AI - Suspicious PE |