1acb061ce63ee8ee172fbdf518bd261ef2c46d818ffd4b1614db6ce3daa5a885

Classification: Malicious

1acb061ce63ee8ee172fbdf518bd261ef2c46d818ffd4b1614db6ce3daa5a885 is a trojan (Windows executable, 585.0 KB). Linked to Mustang Panda activity.

Detection summary

  • 42 antivirus detections (60% detection ratio)
  • 0 IDS alerts
  • 5 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: MUSTANG PANDA (G0129)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2023-07-04 20:00:03 2026-08-17 15:45:07 malicious-activity
Generic.Malware MalwareBazaar Abuse.ch 2024-08-22 15:30:50 2024-08-22 15:30:50 malicious-activity
Ta428 Maltiverse 2023-07-04 04:29:44 2023-07-05 20:50:38 malicious-activity
Generic.Malware Maltiverse 2023-07-05 11:14:13 2023-07-05 11:14:13 G0129 Mustang Panda

Tags

apt malware plugx

Sample information

Filenames
1acb061ce63ee8ee172fbdf518bd261ef2c46d818ffd4b1614db6ce3daa5a885
File type
PE32 executable (DLL) (GUI) Intel 80386, for MS Wi ...
Size
599040 bytes
MD5
6b2606f5b7d5eb15cf1c9acc6648b3d1
SHA-1
c5c5cac8bbd5f297a5094c979e3e0862e34109e2
SHA-256
1acb061ce63ee8ee172fbdf518bd261ef2c46d818ffd4b1614db6ce3daa5a885
First indexed
2023-07-04 19:42:08
Last updated
2026-08-17 15:45:08

Antivirus detections

EngineDetection
BkavW32.AIDetectMalware
LionicTrojan.Win32.Barys.4!c
CynetMalicious (score: 100)
ALYacGen:Variant.Barys.365352
SangforTrojan.Win32.Korplug.V1mg
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Win32/Korplug.3f56cef9
CyrenW32/ABRisk.TMDU-2167
SymantecTrojan Horse
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win32/Korplug.VF
APEXMalicious
BitDefenderGen:Variant.Barys.365352
MicroWorld-eScanGen:Variant.Barys.365352
AvastWin32:TrojanX-gen [Trj]
RisingTrojan.Korplug!8.3EA (TFE:5:URYGkSSndzJ)
EmsisoftGen:Variant.Barys.365352 (B)
F-SecureTrojan.TR/Korplug.svfgk
VIPREGen:Variant.Barys.365352
TrendMicroTROJ_GEN.R002C0RDK23
McAfee-GW-EditionRDN/Generic.dx
FireEyeGeneric.mg.6b2606f5b7d5eb15
SophosMal/Swrort-Y
WebrootW32.Trojan.Gen
AviraTR/Korplug.svfgk
MAXmalware (ai score=88)
Antiy-AVLTrojan/Win32.Korplug
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Barys.D59328
GDataGen:Variant.Barys.365352
GoogleDetected
Acronissuspicious
McAfeeRDN/Generic.dx
Cylanceunsafe
PandaTrj/Chgt.AD
TrendMicro-HouseCallTROJ_GEN.R002C0RDK23
TencentWin32.Trojan.Korplug.Vmhl
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Korplug.VF!tr
BitDefenderThetaGen:NN.ZedlaF.36270.Kq4@a0kEZ6d
AVGWin32:TrojanX-gen [Trj]
DeepInstinctMALICIOUS

Process list

NameCommand line
<Ignored Process>
rundll32.exe"C:\1acb061ce63ee8ee172fbdf518bd261ef2c46d818ffd4b1614db6ce3daa5a885.dll",#1
WerFault.exe-u -p 6828 -s 660
WerFault.exe-u -p 6828 -s 660
WerFault.exe-u -p 6828 -s 660