86a385af82154816c819180b7501f5c614f442482957599b56a7932eb6691135

Classification: Malicious

86a385af82154816c819180b7501f5c614f442482957599b56a7932eb6691135 is a malicious file sample. Reported by 2 threat sources, last seen 2026-09-03.

Detection summary

  • 55 antivirus detections
  • 1 IDS alerts
  • 2 processes observed
  • 2 contacted hosts
  • 1 DNS requests

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2024-02-10 16:22:15 2026-09-03 00:45:05 malicious-activity
Generic.Malware MalwareBazaar Abuse.ch 2024-02-10 16:07:22 2024-02-10 16:07:22 malicious-activity

Tags

njrat infostealer

Sample information

Filenames
86a385af82154816c819180b7501f5c614f442482957599b56a7932eb6691135, bT34.exe
File type
application/x-dosexec
Size
32768 bytes
MD5
400f00d600f464e055cbcd68982d05c3
SHA-1
9186b9436ddb37d3d082564b8875274109c98ea9
SHA-256
86a385af82154816c819180b7501f5c614f442482957599b56a7932eb6691135
First indexed
2024-02-10 16:08:28
Last updated
2026-09-03 00:45:05

Antivirus detections

EngineDetection
ALYacTrojan.GenericKDZ.61581
APEXMalicious
AVGMSIL:Bladabindi-JK [Trj]
AhnLab-V3Trojan/Win32.SpyGate.R292993
Antiy-AVLTrojan/MSIL.Crypt
ArcabitTrojan.Generic.DF08D
AvastMSIL:Bladabindi-JK [Trj]
AviraTR/Dropper.Gen7
BaiduMSIL.Backdoor.Bladabindi.a
BitDefenderTrojan.GenericKDZ.61581
BitDefenderThetaGen:NN.ZemsilF.36744.cm0@aqGz2vo
BkavW32.AIDetectMalware.CS
CAT-QuickHealTrojan.MsilFC.S20327749
ClamAVWin.Packed.njRAT-7445143-0
CrowdStrikewin/malicious_confidence_100% (W)
Cybereasonmalicious.36ddb3
Cylanceunsafe
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
DrWebBackDoor.Bladabindi.16104
ESET-NOD32a variant of MSIL/Bladabindi.AZ
Elasticmalicious (high confidence)
EmsisoftTrojan.GenericKDZ.61581 (B)
F-SecureTrojan.TR/Dropper.Gen7
FireEyeGeneric.mg.400f00d600f464e0
FortinetMSIL/Bladabindi.AS!tr
GDataMSIL.Backdoor.Bladabindi.AV
GoogleDetected
IkarusTrojan.MSIL.Bladabindi
JiangminTrojan.MSIL.oetu
K7AntiVirusTrojan ( 700000121 )
K7GWTrojan ( 700000121 )
KasperskyHEUR:Trojan-Spy.MSIL.KeyLogger.gen
MAXmalware (ai score=83)
MalwarebytesGeneric.Malware.AI.DDS
MaxSecureTrojan.Malware.300983.susgen
McAfeeTrojan-FSCY!400F00D600F4
MicroWorld-eScanTrojan.GenericKDZ.61581
MicrosoftTrojan:MSIL/Bladabindi
PandaTrj/GdSda.A
RisingBackdoor.njRAT!1.9E49 (CLASSIC)
SangforSuspicious.Win32.Save.a
SentinelOneStatic AI - Malicious PE
SkyhighTrojan-FSCY!400F00D600F4
SophosMal/Bladabi-W
SymantecBackdoor.Ratenjay!gen3
TrendMicroTrojanSpy.MSIL.LIMEKEYLOG.SMLV
TrendMicro-HouseCallTrojanSpy.MSIL.LIMEKEYLOG.SMLV
VBA32TScope.Trojan.MSIL
VIPRETrojan.GenericKDZ.61581
VaristW32/Razy.DC.gen!Eldorado
VirITTrojan.Win32.MSIL_Heur.A
XcitiumTrojWare.MSIL.Bladabindi.BGS@7lngf6
ZoneAlarmHEUR:Trojan-Spy.MSIL.KeyLogger.gen
tehtrisGeneric.Malware

Network contacts

46.246.12.68 46.246.6.2

DNS requests

berlyndnero.duckdns.org

Process list

NameCommand line
bT34.exe
bT34.exe