96e8fb0e9ebec5b0475d53063e9afc83dac0b93f7f1ef1ad36a21bfe56a8df86
Classification: Malicious
96e8fb0e9ebec5b0475d53063e9afc83dac0b93f7f1ef1ad36a21bfe56a8df86 is a trojan. Detected by 57 antivirus engines. Linked to Bandook malware.
Detection summary
- 57 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: BANDOOK (S0234)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Bandook | Triage | 2026-05-08 08:01:41 | 2026-05-08 08:01:41 | malicious-activity | S0234 Bandook |
Tags
bandook discovery persistence rat trojanSample information
- Filenames
- 96e8fb0e9ebec5b0475d53063e9afc83dac0b93f7f1ef1ad36a21bfe56a8df86.exe
- SHA-256
96e8fb0e9ebec5b0475d53063e9afc83dac0b93f7f1ef1ad36a21bfe56a8df86- First indexed
- 2026-05-08 08:01:41
- Last updated
- 2026-09-03 02:25:38
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Gen:Variant.Graftor.964314 |
| APEX | Malicious |
| AVG | Win32:Trojan-gen |
| AhnLab-V3 | Malware/Win32.Generic.C4263985 |
| Alibaba | Backdoor:Win32/Crypminal.c0e0a5fc |
| Antiy-AVL | Trojan/Win32.Injector |
| Arcabit | Trojan.Graftor.DEB6DA |
| Avast | Win32:Trojan-gen |
| Avira | TR/Injector.fnrxx |
| BitDefender | Gen:Variant.Graftor.964314 |
| BitDefenderTheta | AI:Packer.5AA402AF21 |
| Bkav | W32.Common.48F1674A |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cybereason | malicious.04ba58 |
| Cylance | unsafe |
| Cynet | Malicious (score: 99) |
| DeepInstinct | MALICIOUS |
| DrWeb | BackDoor.Bandook.68 |
| ESET-NOD32 | a variant of Win32/Injector.EIMW |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Variant.Graftor.964314 (B) |
| F-Secure | Trojan.TR/Injector.fnrxx |
| FireEye | Generic.mg.f76d72504ba58946 |
| Fortinet | W32/EIMW!tr |
| GData | Gen:Variant.Graftor.964314 |
| Detected | |
| Gridinsoft | Ransom.Win32.Wacatac.sa |
| Ikarus | Backdoor.Win32.Bandook |
| Jiangmin | Backdoor.Crypminal.ct |
| K7AntiVirus | Trojan ( 0055c71d1 ) |
| K7GW | Trojan ( 0055c71d1 ) |
| Kaspersky | HEUR:Backdoor.Win32.Crypminal.gen |
| Kingsoft | malware.kb.a.887 |
| Lionic | Trojan.Win32.Crypminal.m!c |
| MAX | malware (ai score=83) |
| Malwarebytes | Generic.Malware.AI.DDS |
| MaxSecure | Trojan.Malware.116872102.susgen |
| McAfee | Artemis!F76D72504BA5 |
| MicroWorld-eScan | Gen:Variant.Graftor.964314 |
| Microsoft | Trojan:Win32/Wacatac.B!ml |
| NANO-Antivirus | Trojan.Win32.Crypminal.iekxiz |
| Panda | Trj/GdSda.A |
| Rising | Trojan.Injector!8.C4 (TFE:3:QqOWnppjtqI) |
| Sangfor | Backdoor.Win32.Injector.Vvf9 |
| Skyhigh | BehavesLike.Win32.ObfuscatedPoly.vh |
| Sophos | Mal/Generic-S |
| Symantec | Trojan.Gen.MBT |
| Tencent | Malware.Win32.Gencirc.115ce446 |
| TrendMicro | TROJ_GEN.R002C0XCQ24 |
| TrendMicro-HouseCall | TROJ_GEN.R002C0XCQ24 |
| VBA32 | BScope.Backdoor.Androm |
| VIPRE | Gen:Variant.Graftor.964314 |
| Varist | W32/ABRisk.SUPQ-1009 |
| ViRobot | Trojan.Win.Z.Injector.2711040 |
| Zillya | Trojan.Injector.Win32.804984 |
| ZoneAlarm | HEUR:Backdoor.Win32.Crypminal.gen |
| alibabacloud | Trojan:Win/Injector.LRVP |