sub_4bda777159fc.bin

Classification: Malicious

sub_4bda777159fc.bin is a malicious file sample (Windows 64-bit executable, 240.5 KB). Flagged by 4% of antivirus engines (3 detections).

Detection summary

  • 3 antivirus detections (4% detection ratio)
  • 0 IDS alerts
  • 3 processes observed
  • 1 contacted hosts
  • 1 DNS requests

MITRE ATT&CK associations

Intrusion sets: TA505 (G0092)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Ta505 Triage 2026-05-24 01:28:25 2026-05-24 01:28:25 malicious-activity G0092 TA505
mg.Generic Hybrid-Analysis 2019-11-08 18:15:06 2019-11-08 18:15:06

Tags

ta505

Sample information

Filenames
sub_4bda777159fc.bin, InitScope.dll
File type
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Size
246272 bytes
MD5
1407415f1df63ffa944e61bd0020f9f1
SHA-1
194a42c44da4e56bac8d3675764da833c8692fe3
SHA-256
4bda777159fcaf021cb5ac98dc6f427fc0dc4725abb6a3d6521d7a0f89897063
First indexed
2019-11-08 18:15:06
Last updated
2026-08-04 13:18:46

Antivirus detections

EngineDetection
CrowdStrikewin/malicious_confidence_60% (D)
FireEyeGeneric.mg.1407415f1df63ffa
Endgamemalicious (high confidence)

Network contacts

195.123.246.12

DNS requests

microsoft-hub-us.com

Process list

NameCommand line
<Ignored Process>
rundll32.exe%WINDIR%\System32\rundll32.exe "C:\InitScope.dll",#1
rundll32.exe"C:\InitScope.dll",#1