sub_8236b4c91e12.bin

Classification: Malicious

sub_8236b4c91e12.bin is a malicious file sample. Linked to Bazar malware. Reported by 3 threat sources, last seen 2026-05-24.

Detection summary

  • 37 antivirus detections (52% detection ratio)
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 2 DNS requests

MITRE ATT&CK associations

Malware families: BAZAR (S0534)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Bazar Triage 2026-04-28 18:46:40 2026-05-24 01:30:24 malicious-activity S0534 Bazar
BazaLoader MalwareBazaar Abuse.ch 2025-03-23 20:38:19 2025-03-23 20:38:19 malicious-activity S0534 Bazar
Gen:Variant.Mikey Hybrid-Analysis 2020-10-01 07:30:04 2020-10-01 07:30:04

Tags

bazarbackdoor backdoor

Sample information

Filenames
sub_8236b4c91e12.bin, 8236b4c91e12dee425e93a74b122156e603c15001831bd15d5d3f8d4b895baa3.exe, 8236b4c91e12dee425e93a74b122156e603c15001831bd15d5d3f8d4b895baa3, file
File type
PE32+ executable (GUI) x86-64, for MS Windows
Size
230912 bytes
MD5
03e699324d06bd3d597994f5df893048
SHA-1
d8a343356f2769ef737b074910471436db3225be
SHA-256
8236b4c91e12dee425e93a74b122156e603c15001831bd15d5d3f8d4b895baa3
First indexed
2020-10-01 07:30:04
Last updated
2026-07-09 20:58:22

Antivirus detections

EngineDetection
CynetMalicious (score: 85)
McAfeeArtemis!03E699324D06
CylanceUnsafe
K7AntiVirusTrojan ( 0056f8a71 )
AlibabaTrojan:Win32/Mansabo.4cd5d1c3
K7GWTrojan ( 0056f8a71 )
CrowdStrikewin/malicious_confidence_60% (W)
SymantecTrojan.Gen.MBT
ESET-NOD32a variant of Win64/Bazar.T
APEXMalicious
KasperskyTrojan.Win32.Mansabo.gaq
BitDefenderGen:Variant.Mikey.112806
MicroWorld-eScanGen:Variant.Mikey.112806
AvastWin64:TrojanX-gen [Trj]
Ad-AwareGen:Variant.Mikey.112806
ComodoMalware@#37c5jyklrp21o
F-SecureHeuristic.HEUR/AGEN.1136595
VIPRETrojan.Win32.Generic!BT
InvinceaMal/Generic-S
McAfee-GW-EditionArtemis!Trojan
FireEyeGen:Variant.Mikey.112806
EmsisoftGen:Variant.Mikey.112806 (B)
IkarusTrojan-Banker.TrickBot
AviraHEUR/AGEN.1136595
MicrosoftTrojan:Win32/Wacatac.C!ml
ArcabitTrojan.Mikey.D1B8A6
AegisLabTrojan.Win32.Mikey.4!c
ZoneAlarmTrojan.Win32.Mansabo.gaq
GDataGen:Variant.Mikey.112806
AhnLab-V3Trojan/Win32.Agent.C4170527
ALYacGen:Variant.Mikey.112806
MAXmalware (ai score=84)
TrendMicro-HouseCallTROJ_GEN.R002H0CIT20
RisingTrojan.Agent!8.B1E (TFE:5:1bzsKHM0YUI)
FortinetW64/Agent.XZ!tr
AVGWin64:TrojanX-gen [Trj]
Qihoo-360Generic/Trojan.66a

DNS requests

_ldap._tcp.dc._msdcs.scl3.dc isatap.scl3.dc