1b3cf050d626706d32c1c2c1cbd4975d519cfbdb9bca0f2e66b7e1120030b439

Classification: Malicious

1b3cf050d626706d32c1c2c1cbd4975d519cfbdb9bca0f2e66b7e1120030b439 is a malicious file sample. Linked to Trojan.Karagany malware.

Detection summary

  • 89 antivirus detections (74% detection ratio)
  • 0 IDS alerts
  • 4 processes observed
  • 2 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: TROJAN.KARAGANY (S0094)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Trojan.Karagany Hybrid-Analysis 2021-03-29 21:00:29 2021-03-29 21:00:29 S0094 Trojan.Karagany

Sample information

Filenames
1b3cf050d626706d32c1c2c1cbd4975d519cfbdb9bca0f2e66b7e1120030b439
File type
PE32 executable (GUI) Intel 80386, for MS Windows
Size
538152 bytes
MD5
0c08ae9498627dd8f85286901876a1a3
SHA-1
9abfc57850b57259b24c107b287deb91f1e38b40
SHA-256
1b3cf050d626706d32c1c2c1cbd4975d519cfbdb9bca0f2e66b7e1120030b439
First indexed
2021-03-29 21:00:29
Last updated
2025-11-04 06:27:30

Antivirus detections

EngineDetection
MicroWorld-eScanGen:Variant.Barys.2796
CAT-QuickHealTrojan.Karagany
McAfeeBackDoor-FBST!0C08AE949862
CylanceUnsafe
VIPRETrojan.Win32.Generic!BT
K7AntiVirusRiskware ( 0040f0fb1 )
K7GWRiskware ( 0040f0fb1 )
TheHackerTrojan/Downloader.Karagany.e
TrendMicroTROJ_SPNR.35JA13
BaiduWin32.Trojan.WisdomEyes.16070401.9500.9814
SymantecTrojan.Gen.4
TrendMicro-HouseCallTROJ_SPNR.35JA13
AvastWin32:Malware-gen
KasperskyTrojan.Win32.Karagany.a
BitDefenderGen:Variant.Barys.2796
NANO-AntivirusTrojan.Win32.Clons.cvnrhl
Paloaltogeneric.ml
AegisLabTroj.W32.Benban.yc!c
TencentWin32.Trojan.Karagany.Eom
Ad-AwareGen:Variant.Barys.2796
SophosMal/Miio-A
ComodoUnclassifiedMalware
F-SecureGen:Variant.Barys.2796
DrWebWin32.HLLW.Autoruner1.59296
ZillyaTrojan.Benban.Win32.23
McAfee-GW-EditionBackDoor-FBST!0C08AE949862
EmsisoftGen:Variant.Barys.2796 (B)
SentinelOnestatic engine - malicious
CyrenW32/Trojan.YOLJ-1594
JiangminTrojan/Benban.e
WebrootW32.Trojan.Gen
AviraTR/Rogue.1274725
Antiy-AVLTrojan/Win32.Benban
Endgamemalicious (high confidence)
ArcabitTrojan.Barys.DAEC
ZoneAlarmTrojan.Win32.Karagany.a
AhnLab-V3Trojan/Win32.Benban.C1144427
VBA32Trojan.Karagany
AVwareTrojan.Win32.Generic!BT
MAXmalware (ai score=100)
ESET-NOD32Win32/TrojanDownloader.Karagany.E
RisingTrojan.Agent!1.66B1 (CLASSIC)
YandexTrojan.Benban!ue9OUMXSbn0
IkarusTrojan-Downloader.Win32.Karagany
GDataGen:Variant.Barys.2796
AVGWin32:Malware-gen
PandaTrj/CI.A
CrowdStrikemalicious_confidence_90% (W)
Qihoo-360Win32/Trojan.Downloader.4a4
ALYacGen:Trojan.Heur3.LPT.GOZbaSKjj5dab
APEXMalicious
AlibabaTrojanDownloader:Win32/Karagany.817f0a64
Antiy-AVLTrojan[APT]/Win32.Crouchingyeti
ArcabitTrojan.Heur3.LPT.GOZbaSKjj5dab
BitDefenderGen:Trojan.Heur3.LPT.GOZbaSKjj5dab
BkavW32.AIDetectMalware
CAT-QuickHealTrojan.Ghanarava.164027386676a1a3
CTXexe.trojan.gozbaskjj5dab
CrowdStrikewin/malicious_confidence_100% (W)
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
Elasticmalicious (high confidence)
EmsisoftGen:Trojan.Heur3.LPT.GOZbaSKjj5dab (B)
F-SecureTrojan.TR/Rogue.1274725
FortinetW32/Injector.fam!tr
GDataGen:Trojan.Heur3.LPT.GOZbaSKjj5dab
GoogleDetected
IkarusTrojan-Downloader.Win32.Delf
KingsoftWin32.Troj.Unknown.a
LionicTrojan.Win32.Karagany.4!c
MalwarebytesMalware.Heuristic.2037
MaxSecureTrojan.Malware.300983.susgen
McAfeeDti!1B3CF050D626
MicroWorld-eScanGen:Trojan.Heur3.LPT.GOZbaSKjj5dab
MicrosoftRogue:Win32/Multiverze!rfn
RisingTrojan.Agent!1.66B1 (CLOUD)
SangforSuspicious.Win32.Save.ins
SentinelOneStatic AI - Malicious PE
SkyhighBehavesLike.Win32.Generic.hh
SymantecTrojan.Gen.MBT
TencentWin32.Trojan.Karagany.Wmhl
Trapminesuspicious.low.ml.score
TrellixENSBackDoor-FBST!0C08AE949862
VIPREGen:Trojan.Heur3.LPT.GOZbaSKjj5dab
VirITTrojan.Win32.Genus.YHX
XcitiumMalware@#2bdg8p6mosn1v
ZoneAlarmMal/Miio-A
alibabacloudTrojan[downloader]:Win/Injector.KBS
huorongHVM:Trojan/Injector.gen!A

Network contacts

23.47.169.181 93.188.161.235

Process list

NameCommand line
1b3cf050d626706d32c1c2c1cbd4975d519cfbdb9bca0f2e66b7e1120030b439.exe
1b3cf050d626706d32c1c2c1cbd4975d519cfbdb9bca0f2e66b7e1120030b439.exe
DFDWizard.exe-fst
DFDWizard.exe