OTX_a26df4f62ada084a596bf0f603691bc9c02024be98abec4a9872f0ff0085f940

Classification: Malicious

OTX_a26df4f62ada084a596bf0f603691bc9c02024be98abec4a9872f0ff0085f940 is a trojan (Windows executable, 68.0 KB). Linked to Blacktech activity.

Detection summary

  • 41 antivirus detections (63% detection ratio)
  • 0 IDS alerts
  • 1 processes observed
  • 1 contacted hosts
  • 1 DNS requests

MITRE ATT&CK associations

Intrusion sets: BLACKTECH (G0098)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
BlackTech MalwarePatrol 2026-03-03 18:16:28 2026-03-03 18:16:28 malicious-activity G0098 BlackTech
Gen:Variant.Graftor Hybrid-Analysis 2018-06-10 11:00:12 2018-06-10 11:00:12

Tags

blacktech temp.overboard palmerworm g0098 t-apt-03 manga taurus circuit panda radio panda red djinn earth hundun huapi

Sample information

Filenames
OTX_a26df4f62ada084a596bf0f603691bc9c02024be98abec4a9872f0ff0085f940
File type
PE32 executable (GUI) Intel 80386, for MS Windows
Size
69641 bytes
MD5
761ef01cacf2dadc39894bbf2b1497e0
SHA-1
67239ae583a22be24416257c54b1136d46715086
SHA-256
a26df4f62ada084a596bf0f603691bc9c02024be98abec4a9872f0ff0085f940
First indexed
2018-06-10 11:00:12
Last updated
2026-10-12 22:08:31

Antivirus detections

EngineDetection
BkavW32.eHeur.Malware14
MicroWorld-eScanGen:Variant.Graftor.484378
CAT-QuickHealTrojan.IGENERIC
McAfeeRDN/Generic.dx
CylanceUnsafe
K7GWTrojan ( 005190ca1 )
K7AntiVirusTrojan ( 005190ca1 )
ArcabitTrojan.Graftor.D7641A
Invinceaheuristic
CyrenW32/Trojan.KDEB-6528
SymantecTrojan Horse
ESET-NOD32a variant of Win32/Agent.ZEM
TrendMicro-HouseCallTROJ_GEN.R038C0OCM18
Paloaltogeneric.ml
GDataGen:Variant.Graftor.484378
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Graftor.484378
NANO-AntivirusTrojan.Win32.Jaike.ezbqrc
AegisLabTroj.W32.Generic!c
AvastWin32:Malware-gen
TencentWin32.Trojan.Jaike.Afhu
Ad-AwareGen:Variant.Graftor.484378
SophosMal/Generic-S
F-SecureGen:Variant.Graftor.484378
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_GEN.R038C0OCM18
McAfee-GW-EditionRDN/Generic.dx
EmsisoftGen:Variant.Graftor.484378 (B)
AviraTR/Jaike.qlzld
Antiy-AVLTrojan/Win32.AGeneric
Endgamemalicious (high confidence)
ZoneAlarmHEUR:Trojan.Win32.Generic
ALYacGen:Variant.Graftor.484378
AVwareTrojan.Win32.Generic!BT
MAXmalware (ai score=97)
VBA32BScope.Trojan.Tiggre
IkarusBackdoor.Win32.Farfli
FortinetW32/Agent.ZEM!tr
AVGWin32:Malware-gen
PandaTrj/GdSda.A
Qihoo-360Win32/Trojan.5da

Network contacts

36.237.90.53

DNS requests

office.panasocin.com

Process list

NameCommand line
OTX_a26df4f62ada084a596bf0f603691bc9c02024be98abec4a9872f0ff0085f940.exe