9036d04ac3075bc18251c03a5fd1665a28e8a3a484e7ed77fae800a5015a153d
Classification: Malicious
9036d04ac3075bc18251c03a5fd1665a28e8a3a484e7ed77fae800a5015a153d is a trojan (Windows executable, 93.0 KB). Linked to Kasidet malware.
Detection summary
- 59 antivirus detections (81% detection ratio)
- 0 IDS alerts
- 2 processes observed
- 0 contacted hosts
- 3 DNS requests
MITRE ATT&CK associations
Malware families: KASIDET (S0088)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Worm.Kasidet | Hybrid-Analysis | 2020-10-06 12:17:04 | 2020-10-06 12:17:04 | S0088 Kasidet |
Tags
bot evasive neutrinoSample information
- Filenames
- 9036d04ac3075bc18251c03a5fd1665a28e8a3a484e7ed77fae800a5015a153d
- File type
- PE32 executable (GUI) Intel 80386, for MS Windows
- Size
- 95232 bytes
- MD5
ccbf7cba35bab56563c0fbe4237fdc41- SHA-1
06f5fb43e64e76f7c5ea025b7f97ae0f0a39b5b8- SHA-256
9036d04ac3075bc18251c03a5fd1665a28e8a3a484e7ed77fae800a5015a153d- First indexed
- 2020-10-06 12:17:04
- Last updated
- 2026-09-24 03:33:44
Antivirus detections
| Engine | Detection |
|---|---|
| Bkav | W32.AIDetectVM.malware1 |
| MicroWorld-eScan | Gen:Variant.Mikey.114528 |
| VBA32 | BScope.Trojan-Spy.Zbot |
| FireEye | Generic.mg.ccbf7cba35bab565 |
| McAfee | GenericRXHX-NR!CCBF7CBA35BA |
| Cylance | Unsafe |
| Zillya | Worm.Kasidet.Win32.79 |
| Sangfor | Malware |
| K7AntiVirus | Trojan ( 004b22ef1 ) |
| Alibaba | Worm:Win32/Kasidet.07be641a |
| K7GW | Trojan ( 004b22ef1 ) |
| Cybereason | malicious.a35bab |
| Arcabit | Trojan.Mikey.D1BF60 |
| Invincea | heuristic |
| Symantec | ML.Attribute.HighConfidence |
| TotalDefense | Win32/Tnega.KEZWRVB |
| APEX | Malicious |
| Avast | Win32:Kasidet-B [Trj] |
| Kaspersky | HEUR:Trojan.Win32.Generic |
| BitDefender | Gen:Variant.Mikey.114528 |
| NANO-Antivirus | Trojan.Win32.Hijacker.dlprdf |
| Paloalto | generic.ml |
| AegisLab | Trojan.Win32.Generic.4!c |
| Tencent | Win32.Trojan.Hijacker.Tccl |
| Endgame | malicious (high confidence) |
| Emsisoft | Gen:Variant.Mikey.114528 (B) |
| Comodo | Worm.Win32.Kasidet.AKDD@5q5gzb |
| F-Secure | Trojan.TR/Hijacker.Gen |
| DrWeb | BackDoor.NewFiz.12 |
| VIPRE | Trojan.Win32.Generic!BT |
| TrendMicro | BKDR_CYCBOT.SME3 |
| Trapmine | malicious.high.ml.score |
| Sophos | Mal/Generic-S |
| SentinelOne | DFI - Malicious PE |
| Jiangmin | Trojan/Generic.banst |
| Webroot | W32.Worm.QSU |
| Avira | TR/Hijacker.Gen |
| Fortinet | W32/Kaisdet.AD!tr |
| Antiy-AVL | Trojan/Win32.AGeneric |
| Microsoft | Worm:Win32/Kasidet.B |
| ZoneAlarm | HEUR:Trojan.Win32.Generic |
| Cynet | Malicious (score: 100) |
| AhnLab-V3 | Worm/Win32.Kasidet.R133161 |
| Acronis | suspicious |
| BitDefenderTheta | AI:Packer.7E581E8E1E |
| ALYac | Gen:Variant.Fugrafa.8340 |
| MAX | malware (ai score=100) |
| Ad-Aware | Gen:Variant.Mikey.114528 |
| ESET-NOD32 | a variant of Win32/Kasidet.AA |
| TrendMicro-HouseCall | BKDR_CYCBOT.SME3 |
| Rising | Worm.Kasidet!1.B563 (CLOUD) |
| Yandex | Trojan.Agent!c/O1HyLCfkM |
| Ikarus | Worm.Win32.Kasidet |
| eGambit | Generic.Worm |
| GData | Gen:Variant.Mikey.114528 |
| AVG | Win32:Kasidet-B [Trj] |
| Panda | Trj/Genetic.gen |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Qihoo-360 | HEUR/QVM07.1.Malware.Gen |
DNS requests
_ldap._tcp.dc._msdcs.scl3.dc isatap.scl3.dc stormstresser.net
Process list
| Name | Command line |
|---|---|
| 9036d04ac3075bc18251c03a5fd1665a28e8a3a484e7ed77fae800a5015a153d.exe | |
| hh.exe | |