Invoice and documents‮fdp.scr

Classification: Malicious

Invoice and documents‮fdp.scr is a trojan (application/x-dosexec). Detected by 30 antivirus engines. Linked to Bazar malware.

Detection summary

  • 30 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: BAZAR (S0534)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
BazaLoader MalwareBazaar Abuse.ch 2021-12-14 11:51:01 2021-12-14 11:51:01 malicious-activity S0534 Bazar
BazaLoader Abuse.ch 2021-12-14 11:51:01 2021-12-14 11:51:01 malicious-activity S0534 Bazar

Sample information

Filenames
Invoice and documents‮fdp.scr
File type
application/x-dosexec
MD5
2e24a603bf93ee0210473eba8e1b7d51
SHA-1
41ea0c23115d86c83b32203e24fa6783d3b6bb24
SHA-256
f5ec86919d7c1d52bbdfdc299cd93aa9393069fb00b3aa6be2687959b4b0e925
First indexed
2021-12-14 13:15:05
Last updated
2026-04-30 17:21:38

Antivirus detections

EngineDetection
LionicTrojan.Win64.Kryplod.4!c
CynetMalicious (score: 100)
McAfeeArtemis!2E24A603BF93
CylanceUnsafe
Cybereasonmalicious.3115d8
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win64/Kryptik.CUA
APEXMalicious
KasperskyTrojan.Win64.Kryplod.ain
MicroWorld-eScanTrojan.GenericKD.38272436
AvastFileRepMalware
SophosGeneric ML PUA (PUA)
F-SecureHeuristic.HEUR/AGEN.1146010
McAfee-GW-EditionBehavesLike.Win64.Generic.dc
FireEyeGeneric.mg.2e24a603bf93ee02
EmsisoftTrojan.GenericKD.38272436 (B)
IkarusWin32.Outbreak
AviraHEUR/AGEN.1146010
MicrosoftTrojan:Script/Phonzy.C!ml
GridinsoftTrojan.Heur!.02012023
AhnLab-V3Trojan/Win.BazaLoader.C4848028
MAXmalware (ai score=84)
SentinelOneStatic AI - Suspicious PE
MaxSecureTrojan.Malware.300983.susgen
AVGFileRepMalware
BitDefenderTrojan.GenericKD.38272436
SophosMal/Generic-S
GDataTrojan.GenericKD.38272436
PandaTrj/CI.A
CrowdStrikewin/malicious_confidence_70% (W)