436cfce71290c2fc2f2c362541db68ced6847c66a73b55487e5e5c73b0636c85

Classification: Malicious

436cfce71290c2fc2f2c362541db68ced6847c66a73b55487e5e5c73b0636c85 is a malicious file sample. Linked to Kazuar malware. Detected by 49 antivirus engines.

Detection summary

  • 49 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: KAZUAR (S0265)

Intrusion sets: TURLA (G0010)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-06-03 07:45:04 2026-06-03 07:45:04
Kazuar MalwareBazaar Abuse.ch 2026-05-19 10:49:02 2026-05-19 10:49:02 malicious-activity S0265 Kazuar
Turla MalwarePatrol 2026-03-03 18:13:57 2026-03-03 18:13:57 malicious-activity G0010 Turla

Tags

turla pfinet tag_0530 snake pacifier apt makersmark uroburos venomous bear waterbug iron hunter itg12 krypton group 88 g0010 blue python sig23 atk13 hippo team popeye evasive

Sample information

Filenames
436cfce71290c2fc2f2c362541db68ced6847c66a73b55487e5e5c73b0636c85, 436cfce71290c2fc2f2c362541db68ced6847c66a73b55487e5e5c73b0636c85.bin
File type
PE32 executable for MS Windows 4.00 (GUI), Intel i ...
MD5
035e952a9504894fb311aef75ab64aec
SHA-1
78db2202722f8c5afd7ee135e620908d99bc3d55
SHA-256
436cfce71290c2fc2f2c362541db68ced6847c66a73b55487e5e5c73b0636c85
First indexed
2026-03-03 18:13:57
Last updated
2026-06-03 07:45:04

Antivirus detections

EngineDetection
ALYacBackdoor.MSIL.Kazuar
APEXMalicious
AVGWin32:MalwareX-gen [Misc]
AhnLab-V3Trojan/Win.Generic.C5882680
AlibabaBackdoor:MSIL/KazuarModule.f317b5af
Antiy-AVLTrojan/MSIL.Kazuar
ArcabitTrojan.Turla.4
AvastWin32:MalwareX-gen [Misc]
AviraTR/W32.Agent
BitDefenderTrojan.Turla.4
BkavW32.Malware.7B36146E
CAT-QuickHealBackdoor.Kazuarmodule
CTXexe.trojan.msil
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
DeepInstinctMALICIOUS
ESET-NOD32MSIL/Turla.Y trojan
Elasticmalicious (moderate confidence)
EmsisoftTrojan.Turla.4 (B)
F-SecureTrojan.TR/W32.Agent
FortinetMSIL/Turla.Y!tr
GDataTrojan.Turla.4
GoogleDetected
IkarusTrojan.MSIL.Turla
K7AntiVirusBackdoor ( 006dfced1 )
K7GWBackdoor ( 006dfced1 )
KasperskyHEUR:Trojan.MSIL.Kazuar.gen
KingsoftMSIL.Backdoor.KazuarModule.v
LionicTrojan.Win32.Turla.4!c
MalwarebytesMalware.AI.1621830304
MaxSecureTrojan.Malware.684672969.susgen
McAfeeDti!436CFCE71290
MicroWorld-eScanTrojan.Turla.4
MicrosoftBackdoor:MSIL/KazuarModule.A!dha
Paloaltogeneric.ml
PandaTrj/GdSda.A
RisingTrojan.Turla!8.1C8 (CLOUD)
SangforBackdoor.Msil.Turla.Vm0a
SophosMal/Generic-S
SymantecTrojan.Gen.MBT
TencentMsil.Trojan.Kazuar.Xmhl
Trapminemalicious.moderate.ml.score
TrellixENSArtemis!035E952A9504
TrendMicroTrojan.Win32.ZYX.USBLEC26
TrendMicro-HouseCallTrojan.Win32.ZYX.USBLEC26
VIPRETrojan.Turla.4
VaristW32/ABTrojan.AKUN-4990
ZoneAlarmTroj/MSIL-TKO
alibabacloudBackdoor:MSIL/Turla.Y