18034aa37b6bfc4bac8e1607c80c6318719e4c5e5eba436e7303a2b006bf3161
Classification: Malicious
18034aa37b6bfc4bac8e1607c80c6318719e4c5e5eba436e7303a2b006bf3161 is a trojan (Windows 64-bit executable, 19.7 KB). Linked to Lizar malware.
Detection summary
- 65 antivirus detections (50% detection ratio)
- 0 IDS alerts
- 2 processes observed
- 1 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Diceloader |
Triage |
2026-06-01 17:32:15 |
2026-06-01 17:32:15 |
malicious-activity
|
S0681 Lizar
|
| Generic Malware |
Hybrid-Analysis |
2023-12-11 17:00:04 |
2023-12-11 17:00:04 |
|
|
Sample information
- Filenames
- 18034aa37b6bfc4bac8e1607c80c6318719e4c5e5eba436e7303a2b006bf3161.bin, 18034aa37b6bfc4bac8e1607c80c6318719e4c5e5eba436e7303a2b006bf3161.dll
- File type
- PE32+ executable (DLL) (GUI) x86-64, for MS Windows
- Size
- 20205 bytes
- MD5
8203c3ac4aae80106b310df0dd34de98- SHA-1
52d8c09aad3d8efcb002c272861299e1d6b33b06- SHA-256
18034aa37b6bfc4bac8e1607c80c6318719e4c5e5eba436e7303a2b006bf3161- First indexed
- 2023-12-11 16:45:44
- Last updated
- 2026-09-27 02:32:50
Antivirus detections
| Engine | Detection |
|---|
| Bkav | W64.AIDetectMalware |
| Elastic | malicious (high confidence) |
| DrWeb | Trojan.Loader.777 |
| MicroWorld-eScan | Gen:Variant.Lazy.116701 |
| Malwarebytes | Malware.AI.796910604 |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Arcabit | Trojan.Lazy.D1C7DD |
| Symantec | ML.Attribute.HighConfidence |
| ESET-NOD32 | a variant of Win64/Agent.AYM |
| Cynet | Malicious (score: 100) |
| APEX | Malicious |
| Kaspersky | HEUR:Trojan.Win32.Generic |
| BitDefender | Gen:Variant.Lazy.116701 |
| Avast | Win32:Agent-BDFS [Trj] |
| Emsisoft | Gen:Variant.Lazy.116701 (B) |
| F-Secure | Heuristic.HEUR/AGEN.1302302 |
| VIPRE | Gen:Variant.Lazy.116701 |
| FireEye | Generic.mg.8203c3ac4aae8010 |
| SentinelOne | Static AI - Malicious PE |
| Jiangmin | Trojan.Generic.hrpaj |
| Avira | HEUR/AGEN.1302302 |
| MAX | malware (ai score=82) |
| Antiy-AVL | Trojan/Win64.Shakti |
| Microsoft | Trojan:Win64/Shakti.ME!MTB |
| ZoneAlarm | HEUR:Trojan.Win32.Generic |
| GData | Gen:Variant.Lazy.116701 |
| Google | Detected |
| AhnLab-V3 | Trojan/Win.Generic.R602904 |
| Acronis | suspicious |
| ALYac | Gen:Variant.Lazy.116701 |
| Panda | Trj/GdSda.A |
| Rising | Trojan.Agent!8.B1E (TFE:2:w35SnQRXjwU) |
| Ikarus | Trojan.Win32.Agent |
| MaxSecure | Trojan.Malware.300983.susgen |
| AVG | Win32:Agent-BDFS [Trj] |
| DeepInstinct | MALICIOUS |
| Alibaba | Trojan:Win64/Shakti.4c83278b |
| Avira | TR/W32.Agent.BDFS |
| Bkav | W32.Malware.DDAFAD68 |
| CTX | dll.unknown.lazy |
| ClamAV | Win.Malware.Lazy-10033536-0 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| ESET-NOD32 | Win64/Agent.AYM trojan |
| Elastic | Windows.Generic.Threat |
| F-Secure | Trojan.TR/W32.Agent.BDFS |
| Fortinet | W64/Agent.AYM!tr |
| Gridinsoft | Malware.Win64.DiceLoader.tr |
| K7AntiVirus | Trojan ( 005e42b91 ) |
| K7GW | Trojan ( 005e42b91 ) |
| Kaspersky | UDS:Trojan.Win32.Generic |
| Kingsoft | Win32.Trojan.Generic.a |
| Lionic | Trojan.Win32.Shakti.4!c |
| Malwarebytes | Trojan.Agent |
| McAfeeD | ti!18034AA37B6B |
| Paloalto | generic.ml |
| Sangfor | Trojan.Win64.Shakti.Vupm |
| Skyhigh | Downloader-FCRE!8203C3AC4AAE |
| Sophos | Mal/Generic-S |
| Symantec | Trojan Horse |
| Tencent | Malware.Win32.Gencirc.13f9a7e1 |
| TrellixENS | Downloader-FCRE!8203C3AC4AAE |
| Webroot | W32.Trojan.Gen |
| Zillya | Trojan.Agent.Win64.41023 |
| huorong | Trojan/W64.Agent.am |
Process list
| Name | Command line |
|---|
| <Ignored Process> | |
| rundll32.exe | "C:\18034aa37b6bfc4bac8e1607c80c6318719e4c5e5eba436e7303a2b006bf3161.dll",#1 |