3db26170aa5c06b54c8d60374f59251f.bin.dll
Classification: Malicious
3db26170aa5c06b54c8d60374f59251f.bin.dll is a trojan (Windows executable, 16.5 KB). Detected by 73 antivirus engines. Linked to Systembc malware.
Detection summary
- 73 antivirus detections
- 1 IDS alerts
- 2 processes observed
- 1 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Coroxy |
Cyber Threat Alliance |
2026-10-15 15:23:54 |
2026-10-15 15:23:54 |
malicious-activity
|
S9001 SystemBC
|
| Generic Malware |
Hybrid-Analysis |
2024-02-24 19:00:03 |
2024-02-24 19:00:03 |
|
|
| SystemBC |
MalwareBazaar Abuse.ch |
2024-02-24 18:50:12 |
2024-02-24 18:50:12 |
malicious-activity
|
|
Sample information
- Filenames
- 3db26170aa5c06b54c8d60374f59251f.bin.dll
- File type
- PE32 executable (DLL) (GUI) Intel 80386, for MS Wi ...
- Size
- 16896 bytes
- MD5
3db26170aa5c06b54c8d60374f59251f- SHA-1
648204dc24082ffa498f5627e917f6f64f306730- SHA-256
7eb6fefdb0399a3418a6c375f436e1a4ce52f5c783baa7c5dc92b3921e3fd91e- First indexed
- 2024-02-24 18:50:44
- Last updated
- 2025-10-18 22:31:55
Antivirus detections
| Engine | Detection |
|---|
| ALYac | Gen:Variant.Zusy.406910 |
| APEX | Malicious |
| AVG | Win32:BackdoorX-gen [Trj] |
| AhnLab-V3 | Malware/Win32.Generic.C3447288 |
| Antiy-AVL | Trojan/Win32.Coroxy |
| Arcabit | Trojan.Zusy.D6357E |
| Avast | Win32:BackdoorX-gen [Trj] |
| BitDefender | Gen:Variant.Zusy.406910 |
| BitDefenderTheta | Gen:NN.ZedlaF.36744.bq4@aitEGcn |
| Bkav | W32.AIDetectMalware |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| DrWeb | BackDoor.Coroxy.17 |
| ESET-NOD32 | a variant of Win32/Coroxy.A |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Variant.Zusy.406910 (B) |
| FireEye | Generic.mg.3db26170aa5c06b5 |
| GData | Gen:Variant.Zusy.406910 |
| Google | Detected |
| Ikarus | Trojan.Win32.Coroxy |
| K7AntiVirus | Trojan ( 005514be1 ) |
| K7GW | Trojan ( 005514be1 ) |
| Kaspersky | HEUR:Trojan.Win32.SystemBC.gen |
| MAX | malware (ai score=83) |
| Malwarebytes | Trojan.ProxyAgent |
| MaxSecure | Trojan.Malware.209967292.susgen |
| MicroWorld-eScan | Gen:Variant.Zusy.406910 |
| Microsoft | Trojan:Win32/SystemBC.SA |
| NANO-Antivirus | Trojan.Win32.SystemBC.kdthhg |
| Panda | Trj/GdSda.A |
| Rising | Backdoor.Coroxy!8.12282 (TFE:5:VYPiNz8nxGF) |
| Sangfor | Trojan.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Sophos | Troj/Coroxy-A |
| Symantec | ML.Attribute.HighConfidence |
| Trapmine | suspicious.low.ml.score |
| TrendMicro | Backdoor.Win32.COROXY.SMRTI |
| TrendMicro-HouseCall | Backdoor.Win32.COROXY.SMRTI |
| VBA32 | BScope.TrojanProxy.Sybici |
| VIPRE | Gen:Variant.Zusy.406910 |
| VirIT | Trojan.Win32.Genus.UGC |
| Yandex | Trojan.SystemBC!39GBy4PwvD0 |
| Zillya | Trojan.Coroxy.Win32.169 |
| ZoneAlarm | HEUR:Trojan.Win32.SystemBC.gen |
| AVG | Win32:MalwareX-gen [Bd] |
| Alibaba | Trojan:Win32/SystemBC.610a8a03 |
| Avast | Win32:MalwareX-gen [Bd] |
| Avira | TR/AD.Coroxy.yknoo |
| CAT-QuickHeal | Trojan.Ghanarava.173360977159251f |
| CTX | dll.trojan.coroxy |
| Cylance | Unsafe |
| F-Secure | Trojan.TR/AD.Coroxy.yknoo |
| Fortinet | W32/Coroxy.A!tr |
| Kaspersky | UDS:Trojan.Win32.SystemBC.gen |
| Kingsoft | malware.kb.a.986 |
| Lionic | Trojan.Win32.Coroxy.4!c |
| Malwarebytes | Malware.AI.4038753949 |
| MaxSecure | Trojan.Malware.325862330.susgen |
| McAfeeD | ti!7EB6FEFDB039 |
| Microsoft | Trojan:Win32/Coroxy.MKZ!MTB |
| Paloalto | generic.ml |
| SentinelOne | Static AI - Suspicious PE |
| Skyhigh | BehavesLike.Win32.Dropper.lm |
| Symantec | Trojan.Gen.MBT |
| Tencent | Malware.Win32.Gencirc.11bced06 |
| TrellixENS | Artemis!3DB26170AA5C |
| Varist | W32/ABRisk.IAMW-9167 |
| Xcitium | Malware@#2jfmr8a2s26yx |
| ZoneAlarm | Troj/Coroxy-A |
| alibabacloud | Trojan:Win/Coroxy.A |
| huorong | Trojan/Coroxy.a |
Process list
| Name | Command line |
|---|
| <Ignored Process> | |
| rundll32.exe | "C:\3db26170aa5c06b54c8d60374f59251f.bin.dll",#1 |