b76b6bbda8703fa801898f843692ec1968e4b0c90dfae9764404c1a54abf650b

Classification: Malicious

b76b6bbda8703fa801898f843692ec1968e4b0c90dfae9764404c1a54abf650b is a trojan (Windows 64-bit executable, 994.5 KB). Linked to Lazarus Group activity.

Detection summary

  • 82 antivirus detections (67% detection ratio)
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: LAZARUS GROUP (G0032)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Roaming Mantis Maltiverse 2023-04-13 04:20:43 2023-04-14 02:04:24 malicious-activity
Lazarus Group Maltiverse 2023-03-31 04:14:34 2023-04-01 00:17:23 malicious-activity G0032 Lazarus Group
Trojan.Win64.Agent Hybrid-Analysis 2020-06-17 16:15:10 2020-06-17 16:15:10

Tags

apt

Sample information

Filenames
b76b6bbda8703fa801898f843692ec1968e4b0c90dfae9764404c1a54abf650b
File type
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Size
1018368 bytes
MD5
f4b55da7870e9ecd5f3f565f40490996
SHA-1
4c729e0e247cfa7a4b047e463bc6e34ea4298e3b
SHA-256
b76b6bbda8703fa801898f843692ec1968e4b0c90dfae9764404c1a54abf650b
First indexed
2020-06-17 16:15:10
Last updated
2026-10-10 05:50:59

Antivirus detections

EngineDetection
MicroWorld-eScanTrojan.GenericKD.33700053
FireEyeTrojan.GenericKD.33700053
CAT-QuickHealTrojan.Presenoker
ALYacTrojan.Agent.1678851L
CylanceUnsafe
ZillyaTrojan.Agent.Win64.5137
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:Application/qedlk.d55f96de
K7GWTrojan ( 005650f91 )
K7AntiVirusTrojan ( 005650f91 )
ArcabitTrojan.Generic.D20238D5
SymantecTrojan.Gen.2
ESET-NOD32a variant of Win64/Agent.AAG
AvastWin64:Trojan-gen
KasperskyTrojan.Win64.Agent.qwhvku
BitDefenderTrojan.GenericKD.33700053
ViRobotTrojan.Win64.S.Agent.1018368
RisingTrojan.Agent!8.B1E (CLOUD)
Ad-AwareTrojan.GenericKD.33700053
TACHYONTrojan/W32.Agent.1018368.AD
EmsisoftTrojan.GenericKD.33700053 (B)
VIPRETrojan.Win32.Generic!BT
TrendMicroTROJ_FRS.0NA103DU20
McAfee-GW-EditionGeneric Trojan.dz
SophosGeneric PUA EM (PUA)
Paloaltogeneric.ml
CyrenW64/Trojan.AUKJ-5762
JiangminTrojan.Agent.crhl
AviraTR/Agent.qedlk
FortinetW64/Agent.XT!tr
Antiy-AVLGrayWare/Win32.Presenoker
Endgamemalicious (high confidence)
MicrosoftTrojan:Win32/Casdet!rfn
AegisLabTrojan.Multi.Generic.4!c
ZoneAlarmTrojan.Win64.Agent.qwhvku
CynetMalicious (score: 85)
AhnLab-V3Trojan/Win64.Agent.C4080655
McAfeeGeneric Trojan.dz
MAXmalware (ai score=100)
VBA32Adware.Presenoker
TrendMicro-HouseCallTROJ_FRS.0NA103DU20
TencentWin64.Trojan.Agent.Edxd
YandexTrojan.Agent!YWabzgN5H3c
GDataTrojan.GenericKD.33700053
AVGWin64:Trojan-gen
PandaTrj/CI.A
Qihoo-360Win64/Trojan.71e
AlibabaTrojan:Win64/NukeSped.e8a2383e
Antiy-AVLTrojan[APT]/Win64.Operationnorthstar
ArcabitTrojan.Generic.D290972C
BitDefenderTrojan.GenericKD.43030316
BkavW64.AIDetectMalware
CAT-QuickHealTrojan.Ghanarava.1689321068490996
CTXdll.trojan.generic
CynetMalicious (score: 99)
DeepInstinctMALICIOUS
DrWebBackDoor.Siggen2.4476
ESET-NOD32a variant of Win64/NukeSped.EY
Elasticmalicious (moderate confidence)
EmsisoftTrojan.GenericKD.43030316 (B)
F-SecureTrojan.TR/Agent.qedlk
FireEyeTrojan.GenericKD.43030316
GDataTrojan.GenericKD.43030316
GoogleDetected
IkarusTrojan.Win64.Agent
LionicTrojan.Win32.NukeSped.4!c
MaxSecureTrojan.Malware.91370639.susgen
McAfeeDti!B76B6BBDA870
MicroWorld-eScanTrojan.GenericKD.43030316
NANO-AntivirusTrojan.Win64.Mlw.hpdvjo
SangforTrojan.Win32.Lazarus.IOC
SentinelOneStatic AI - Suspicious PE
SkyhighGeneric Trojan.dz
SophosMal/Generic-S
SymantecTrojan Horse
TencentMalware.Win32.Gencirc.13b4259c
TrendMicroTrojan.Win64.LAZARUS.A
TrendMicro-HouseCallTrojan.Win64.LAZARUS.A
VIPRETrojan.GenericKD.43030316
VaristW64/ABTrojan.AUKJ-5762
XcitiumMalware@#3ik9hqcvrngrz
alibabacloudTrojan:Win/NukeSped.EN