1c441d7d8abb43824a77a15c539e46eafb8f098c5e0efcc57f8b688a12af18dd
Classification: Malicious
1c441d7d8abb43824a77a15c539e46eafb8f098c5e0efcc57f8b688a12af18dd is a trojan (Windows 64-bit executable, 18.0 KB). Linked to Lizar malware.
Detection summary
- 68 antivirus detections (47% detection ratio)
- 0 IDS alerts
- 2 processes observed
- 1 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Diceloader |
Triage |
2026-06-06 15:45:55 |
2026-06-06 15:45:55 |
malicious-activity
|
S0681 Lizar
|
| Generic Malware |
Hybrid-Analysis |
2023-05-02 16:30:03 |
2023-05-02 16:30:03 |
|
|
Sample information
- Filenames
- 1c441d7d8abb43824a77a15c539e46eafb8f098c5e0efcc57f8b688a12af18dd.bin, 1c441d7d8abb43824a77a15c539e46eafb8f098c5e0efcc57f8b688a12af18dd.exe
- File type
- PE32+ executable (DLL) (GUI) x86-64, for MS Windows
- Size
- 18383 bytes
- MD5
23918b1f2c19defdcadd52121b4fd18b- SHA-1
3f07408a0beb184b30fb6affdf2c57ccc6f99e4d- SHA-256
1c441d7d8abb43824a77a15c539e46eafb8f098c5e0efcc57f8b688a12af18dd- First indexed
- 2023-05-02 16:11:51
- Last updated
- 2026-08-18 21:59:25
Antivirus detections
| Engine | Detection |
|---|
| Elastic | malicious (high confidence) |
| MicroWorld-eScan | Gen:Variant.Lazy.116701 |
| FireEye | Generic.mg.23918b1f2c19defd |
| ALYac | Gen:Variant.Lazy.116701 |
| CrowdStrike | win/malicious_confidence_100% (W) |
| ESET-NOD32 | a variant of Win64/Agent.AYM |
| APEX | Malicious |
| Kaspersky | HEUR:Trojan.Win32.Generic |
| BitDefender | Gen:Variant.Lazy.116701 |
| Avast | Win32:Agent-BDFS [Trj] |
| Tencent | Win32.Trojan.Generic.Xmhl |
| Emsisoft | Gen:Variant.Lazy.116701 (B) |
| F-Secure | Heuristic.HEUR/AGEN.1302302 |
| DrWeb | Trojan.Loader.777 |
| VIPRE | Gen:Variant.Lazy.116701 |
| McAfee-GW-Edition | BehavesLike.Win64.Infected.lh |
| GData | Gen:Variant.Lazy.116701 |
| Google | Detected |
| Avira | HEUR/AGEN.1302302 |
| Antiy-AVL | Trojan/Win64.Shakti |
| Arcabit | Trojan.Lazy.D1C7DD |
| ZoneAlarm | HEUR:Trojan.Win32.Generic |
| Microsoft | Trojan:Win64/Shakti.ME!MTB |
| Cynet | Malicious (score: 100) |
| Acronis | suspicious |
| McAfee | Artemis!23918B1F2C19 |
| MAX | malware (ai score=80) |
| Malwarebytes | Malware.AI.636049162 |
| Rising | Trojan.Agent!8.B1E (TFE:2:w35SnQRXjwU) |
| Ikarus | Trojan.Win32.Agent |
| MaxSecure | Trojan.Malware.300983.susgen |
| AVG | Win32:Agent-BDFS [Trj] |
| DeepInstinct | MALICIOUS |
| AhnLab-V3 | Trojan/Win.Generic.R602904 |
| Alibaba | Trojan:Win64/Shakti.cbf0f3f7 |
| Bkav | W64.AIDetectMalware |
| CAT-QuickHeal | Trojan.Ghanarava.17255906174fd18b |
| CTX | dll.trojan.shakti |
| ClamAV | Win.Malware.Lazy-10033536-0 |
| Cylance | Unsafe |
| Elastic | Windows.Generic.Threat |
| Fortinet | W64/Agent.AYM!tr |
| Jiangmin | Trojan.Generic.hrpaj |
| K7AntiVirus | Trojan ( 0058d77d1 ) |
| K7GW | Trojan ( 0058d77d1 ) |
| Kaspersky | UDS:Trojan.Win32.Generic |
| Kingsoft | Win32.Troj.Generic.jm |
| Lionic | Trojan.Win32.Shakti.4!c |
| Malwarebytes | Generic.Trojan.Agent.DDS |
| MaxSecure | Trojan.Malware.7164915.susgen |
| McAfee | Downloader-FCRE!23918B1F2C19 |
| McAfeeD | ti!1C441D7D8ABB |
| Paloalto | generic.ml |
| Panda | Trj/CI.A |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | Downloader-FCRE!23918B1F2C19 |
| Sophos | Mal/Generic-S |
| Symantec | Trojan Horse |
| Tencent | Malware.Win32.Gencirc.13afe8d0 |
| TrendMicro | TROJ_FRS.0NA103JM24 |
| TrendMicro-HouseCall | TROJ_FRS.0NA103JM24 |
| VBA32 | Trojan.Loader |
| Varist | W64/ABRisk.TZKU-3630 |
| Webroot | W32.Trojan.Gen |
| Xcitium | Malware@#2b0v4a3j7aq8p |
| Zillya | Trojan.Agent.Win64.28348 |
| alibabacloud | Trojan:Win/Shakti.MA8PHU |
| huorong | Trojan/W64.Agent.am |
Process list
| Name | Command line |
|---|
| <Ignored Process> | |
| rundll32.exe | "C:\1c441d7d8abb43824a77a15c539e46eafb8f098c5e0efcc57f8b688a12af18dd.exe.dll",#1 |