0x0005000000012636-65.exe

Classification: Malicious

0x0005000000012636-65.exe is a trojan (application/x-dosexec). Detected by 26 antivirus engines. Linked to Bazar malware. 3 sightings, last seen 2026-09-15.

Detection summary

  • 26 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: BAZAR (S0534)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Cyber Threat Alliance 2026-09-15 10:14:23 2026-09-15 10:14:23 malicious-activity
BazaLoader Abuse.ch 2021-12-14 00:34:10 2021-12-14 00:34:10 malicious-activity S0534 Bazar
Generic.Malware Abuse.ch 2021-12-14 00:34:10 2021-12-14 00:34:10 malicious-activity

Sample information

Filenames
0x0005000000012636-65.exe
File type
application/x-dosexec
MD5
981a5f3367a199c5b2714ccfa04a79f5
SHA-1
10edf16bd10461eab57740968ad2f4d19f7de21d
SHA-256
752c45a146b9aeeacdf5dc26f03a05b6ddc8f7b788b363698bd9b4e9dcadf22e
First indexed
2021-12-14 02:15:11
Last updated
2026-08-24 07:14:31

Antivirus detections

EngineDetection
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
CynetMalicious (score: 99)
McAfeeArtemis!981A5F3367A1
CrowdStrikewin/malicious_confidence_60% (W)
APEXMalicious
AvastFileRepMalware
KasperskyVHO:Trojan.Win64.Kryplod.gen
F-SecureHeuristic.HEUR/AGEN.1146010
McAfee-GW-EditionBehavesLike.Win64.Drixed.dc
FireEyeGeneric.mg.981a5f3367a199c5
AviraHEUR/AGEN.1146010
MicrosoftTrojan:Win32/Wacatac.B!ml
GridinsoftTrojan.Heur!.02012023
IkarusWin32.SuspectCrc
MaxSecureTrojan.Malware.300983.susgen
AVGFileRepMalware
Cybereasonmalicious.bd1046
SymantecTrojan.Gen.MBT
ESET-NOD32Win64/BazarLoader.BK
McAfee-GW-EditionBehavesLike.Win64.Generic.dc
KingsoftWin32.Troj.Undef.(kcloud)
MicrosoftTrojan:Win64/Sabsik!MTB
CynetMalicious (score: 100)
AVGWin64:Trojan-gen
AvastWin64:Trojan-gen