76b5fa39d5b519e82e63466df1a6b2068cc9754343efbabf862924557c0fc213 (2).dll

Classification: Malicious

76b5fa39d5b519e82e63466df1a6b2068cc9754343efbabf862924557c0fc213 (2).dll is a trojan (Windows executable, 34.5 KB). Linked to Threat Group-3390 activity.

Detection summary

  • 41 antivirus detections (60% detection ratio)
  • 0 IDS alerts
  • 5 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: THREAT GROUP-3390 (G0027)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Emissary Panda Maltiverse 2023-03-02 04:14:48 2023-03-03 14:34:20 malicious-activity G0027 Threat Group-3390
Generic Malware Hybrid-Analysis 2023-03-02 18:15:03 2023-03-02 18:15:03

Tags

apt spyware trojan

Sample information

Filenames
76b5fa39d5b519e82e63466df1a6b2068cc9754343efbabf862924557c0fc213 (2).dll
File type
PE32 executable (DLL) (GUI) Intel 80386, for MS Wi ...
Size
35328 bytes
MD5
3a4e4a3336b9866318f669932f95568f
SHA-1
c267ca9b3aa49aae1b6ca2ec03133349247d8624
SHA-256
76b5fa39d5b519e82e63466df1a6b2068cc9754343efbabf862924557c0fc213
First indexed
2023-03-02 17:53:16
Last updated
2023-03-03 14:34:20

Antivirus detections

EngineDetection
LionicTrojan.Win32.LuckyMouse.4!c
MicroWorld-eScanTrojan.GenericKD.37601026
ALYacTrojan.GenericKD.37601026
VIPRETrojan.GenericKD.37601026
SangforTrojan.Win32.Luckymouse.V6ww
K7AntiVirusTrojan ( 0058280e1 )
AlibabaTrojan:Win32/LuckyMouse.48b36ef4
K7GWTrojan ( 0058280e1 )
CrowdStrikewin/malicious_confidence_100% (W)
SymantecTrojan Horse
ESET-NOD32a variant of Win32/LuckyMouse.AV
APEXMalicious
Paloaltogeneric.ml
CynetMalicious (score: 99)
KasperskyHEUR:Trojan.Win32.LuckyMouse.gen
BitDefenderTrojan.GenericKD.37601026
AvastWin32:Trojan-gen
TencentWin32.Trojan.Luckymouse.Oqil
EmsisoftTrojan.GenericKD.37601026 (B)
DrWebTrojan.Siggen8.52679
TrendMicroTrojan.Win32.SYSUPDATE.BZE
McAfee-GW-EditionBehavesLike.Win32.Infected.nh
FireEyeTrojan.GenericKD.37601026
GDataTrojan.GenericKD.37601026
AviraTR/Redcap.sdlmt
MAXmalware (ai score=81)
ArcabitTrojan.Generic.D23DBF02
ViRobotTrojan.Win.Z.Luckymouse.35328
GoogleDetected
AhnLab-V3Trojan/Win.Injector.C4690305
McAfeeArtemis!3A4E4A3336B9
VBA32TScope.Malware-Cryptor.SB
TrendMicro-HouseCallTrojan.Win32.SYSUPDATE.BZE
Rising[email protected] (RDMK:DCNQSSu/cJaYSm62T6K3Pw)
YandexTrojan.LuckyMouse!QylNxCO0HMA
IkarusTrojan.Win32.LuckyMouse
MaxSecureTrojan.Malware.74127394.susgen
FortinetW32/LuckyMouse.AV!tr
BitDefenderThetaGen:NN.ZedlaF.36308.cu4@a0@LBsdi
AVGWin32:Trojan-gen
PandaTrj/GdSda.A

Process list

NameCommand line
<Ignored Process>
rundll32.exe"C:\76b5fa39d5b519e82e63466df1a6b2068cc9754343efbabf862924557c0fc213_2_.dll",#1
WerFault.exe-u -p 4064 -s 256
rundll32.exe"C:\76b5fa39d5b519e82e63466df1a6b2068cc9754343efbabf862924557c0fc213_2_.dll",#2
WerFault.exe-u -p 2372 -s 260