0a0bd696ec0d98b6dc7cb655ae58370d4d13f08b91a92eef52a0ed1efbb8577e
Classification: Malicious
0a0bd696ec0d98b6dc7cb655ae58370d4d13f08b91a92eef52a0ed1efbb8577e is a trojan (Windows executable, 161.0 KB). Linked to Lazarus Group activity.
Detection summary
- 87 antivirus detections (61% detection ratio)
- 0 IDS alerts
- 2 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Lazarus |
MalwareBazaar Abuse.ch |
2026-05-25 18:10:12 |
2026-05-25 18:10:12 |
malicious-activity
|
G0032 Lazarus Group
|
| Trojan.Manuscrypt |
Hybrid-Analysis |
2020-06-23 14:00:51 |
2020-06-23 14:00:51 |
|
|
Sample information
- Filenames
- 0a0bd696ec0d98b6dc7cb655ae58370d4d13f08b91a92eef52a0ed1efbb8577e.bin, 0a0bd696ec0d98b6dc7cb655ae58370d4d13f08b91a92eef52a0ed1efbb8577e.exe
- File type
- PE32 executable (DLL) (GUI) Intel 80386, for MS Wi ...
- Size
- 164864 bytes
- MD5
aef67f5fa937282139975b13fe9211d7- SHA-1
186f448b56678a3ca845bb204c2cf92a881af607- SHA-256
0a0bd696ec0d98b6dc7cb655ae58370d4d13f08b91a92eef52a0ed1efbb8577e- First indexed
- 2020-06-23 14:00:51
- Last updated
- 2026-10-04 16:43:37
Antivirus detections
| Engine | Detection |
|---|
| MicroWorld-eScan | Gen:Variant.Mikey.76022 |
| nProtect | Ransom/W32.Magniber.164864 |
| CAT-QuickHeal | Trojan.Manuscrypt |
| McAfee | RDN/Generic.dx |
| K7GW | Trojan ( 0051b2ff1 ) |
| K7AntiVirus | Trojan ( 0051b2ff1 ) |
| Arcabit | Trojan.Mikey.D128F6 |
| Baidu | Win32.Trojan.WisdomEyes.16070401.9500.9767 |
| Cyren | W32/Trojan.GJNT-7000 |
| Symantec | Trojan.Gen.2 |
| TrendMicro-HouseCall | TROJ_GEN.R03BC0PJQ17 |
| Avast | Win32:Malware-gen |
| Kaspersky | HEUR:Trojan.Win32.Manuscrypt.gen |
| BitDefender | Gen:Variant.Mikey.76022 |
| NANO-Antivirus | Trojan.Win32.Manuscrypt.euuxvo |
| Paloalto | generic.ml |
| AegisLab | Troj.W32.Manuscrypt!c |
| Ad-Aware | Gen:Variant.Mikey.76022 |
| Emsisoft | Gen:Variant.Mikey.76022 (B) |
| VIPRE | Trojan.Win32.Generic!BT |
| TrendMicro | TROJ_GEN.R03BC0PJQ17 |
| McAfee-GW-Edition | RDN/Generic.dx |
| Sophos | Mal/Generic-S |
| Avira | TR/RedCap.pmxfd |
| Antiy-AVL | Trojan/Win32.Manuscrypt |
| Microsoft | Trojan:Win32/Autophyte.M!dha |
| ViRobot | Trojan.Win32.S.Agent.164864.HW |
| ZoneAlarm | HEUR:Trojan.Win32.Manuscrypt.gen |
| AhnLab-V3 | Trojan/Win32.Navepry.R215554 |
| ALYac | Trojan.Agent.164864 |
| AVware | Trojan.Win32.Generic!BT |
| MAX | malware (ai score=76) |
| Cylance | Unsafe |
| ESET-NOD32 | Win32/NukeSped.AG |
| Yandex | Trojan.Manuscrypt! |
| GData | Gen:Variant.Mikey.76022 |
| AVG | Win32:Malware-gen |
| Panda | Trj/GdSda.A |
| CrowdStrike | malicious_confidence_100% (D) |
| Qihoo-360 | Win32/Trojan.6ad |
| APEX | Malicious |
| AVG | Win32:Trojan-gen |
| Alibaba | Trojan:Win32/Lazarus.e4552927 |
| Antiy-AVL | Trojan[APT]/Win32.Lazarus |
| Arcabit | Trojan.Jaik.DFD77 |
| Avast | Win32:Trojan-gen |
| BitDefender | Gen:Variant.Jaik.64887 |
| Bkav | W32.AIDetectMalware |
| CAT-QuickHeal | Trojan.Lazarus.S14632660 |
| CTX | dll.trojan.lazarus |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| ESET-NOD32 | Win32/NukeSped.AG trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Variant.Jaik.64887 (B) |
| Fortinet | W32/NukeSped.AG!tr |
| GData | Gen:Variant.Jaik.64887 |
| Google | Detected |
| Ikarus | Trojan-Downloader.Win32.Small |
| Jiangmin | Trojan.Lazarus.l |
| K7AntiVirus | Riskware ( 0040eff71 ) |
| K7GW | Riskware ( 0040eff71 ) |
| Kaspersky | HEUR:Trojan.Win32.Lazarus.gen |
| Kingsoft | Win32.Trojan.Lazarus.gen |
| Lionic | Trojan.Win32.Lazarus.4!c |
| Malwarebytes | Malware.AI.3420490084 |
| MaxSecure | Trojan.Malware.11491671.susgen |
| McAfeeD | ti!0A0BD696EC0D |
| MicroWorld-eScan | Gen:Variant.Jaik.64887 |
| Rising | Backdoor.[Lazarus]Bankshot!1.DA04 (CLASSIC) |
| Sangfor | Trojan.Win32.Lazarus.Vqml |
| SentinelOne | Static AI - Suspicious PE |
| Skyhigh | HiddenCobra!AEF67F5FA937 |
| Symantec | ML.Attribute.HighConfidence |
| TACHYON | Ransom/W32.Magniber.164864 |
| Tencent | Malware.Win32.Gencirc.115d41e1 |
| TrellixENS | HiddenCobra!AEF67F5FA937 |
| TrendMicro | Trojan.Win32.COBRA.0NA103C219 |
| TrendMicro-HouseCall | Trojan.Win32.COBRA.0NA103C219 |
| VBA32 | BScope.Trojan.Manuscrypt |
| VIPRE | Gen:Variant.Jaik.64887 |
| Varist | W32/ABTrojan.GJNT-7000 |
| Yandex | Trojan.GenAsa!J3XeXVAHQ7w |
| Zillya | Trojan.NukeSped.Win32.255 |
| alibabacloud | Trojan:Win/Manuscrypt.AZ |
| huorong | Trojan/Manuscrypt.a |
Process list
| Name | Command line |
|---|
| <Ignored Process> | |
| regsvr32.exe | /s "C:\0a0bd696ec0d98b6dc7cb655ae58370d4d13f08b91a92eef52a0ed1efbb8577e.exe.dll" |