bcccb14658e8c1bee8107a2c314957c2bd9e505e73012b0aaa18df9fedf99248

Classification: Malicious

bcccb14658e8c1bee8107a2c314957c2bd9e505e73012b0aaa18df9fedf99248 is a trojan (Windows 64-bit executable, 573.8 KB). Linked to Bazar malware.

Detection summary

  • 59 antivirus detections (26% detection ratio)
  • 1 IDS alerts
  • 3 processes observed
  • 1 contacted hosts
  • 1 DNS requests

MITRE ATT&CK associations

Malware families: BAZAR (S0534)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
AD.Bazar Hybrid-Analysis 2020-12-18 23:00:30 2020-12-18 23:00:30 S0534 Bazar

Sample information

Filenames
bcccb14658e8c1bee8107a2c314957c2bd9e505e73012b0aaa18df9fedf99248
File type
PE32+ executable (GUI) x86-64, for MS Windows
Size
587608 bytes
MD5
dd0c5c4d2cdf6f57be6c7f4d7e64f5fd
SHA-1
032aa1d1eb4d30364bc89d88121a6ef4d645661d
SHA-256
bcccb14658e8c1bee8107a2c314957c2bd9e505e73012b0aaa18df9fedf99248
First indexed
2020-12-18 23:00:30
Last updated
2026-10-06 10:49:23

Antivirus detections

EngineDetection
McAfeeArtemis!DD0C5C4D2CDF
SymantecRansom.Wannacry
TrendMicro-HouseCallTROJ_FRS.VSNTLI20
AvastWin64:TrojanX-gen [Trj]
KasperskyBackdoor.Win32.Bazdor.dy
EmsisoftMalCert-S.DL (A)
F-SecureTrojan.TR/AD.Bazar.mfwsd
DrWebBackDoor.Bazar.49
McAfee-GW-EditionArtemis
FireEyeGeneric.mg.dd0c5c4d2cdf6f57
AviraTR/AD.Bazar.mfwsd
MicrosoftTrojan:Win64/Bazarldr.ZZ
ZoneAlarmBackdoor.Win32.Bazdor.dy
GDataWin64.Trojan.Kryptik.CDK73S
CynetMalicious (score: 100)
ESET-NOD32a variant of Win64/Kryptik.CEM
IkarusTrojan.Win32.Gencbl
FortinetW64/Agent.F184!tr
AVGWin64:TrojanX-gen [Trj]
ALYacTrojan.Agent.Bazar
AhnLab-V3Trojan/Win64.BazarLoader.R359936
AlibabaBackdoor:Win32/Bazdor.bae374a5
Antiy-AVLTrojan/Win64.Kryptik
ArcabitTrojan.Johnnie.D49215
BitDefenderGen:Variant.Johnnie.299541
CAT-QuickHealTrojan.Ghanarava.171391812364f5fd
CTXexe.trojan.bazdor
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
DeepInstinctMALICIOUS
Elasticmalicious (high confidence)
GDataGen:Variant.Johnnie.299541
GoogleDetected
IkarusTrojan.Win32.Generic
JiangminBackdoor.Bazdor.ag
K7AntiVirusTrojan ( 00574dd41 )
K7GWTrojan ( 00574dd41 )
LionicTrojan.Win32.Bazdor.m!c
MalwarebytesCrypt.Trojan.Malicious.DDS
MaxSecureTrojan.Malware.111231637.susgen
McAfeeGenericRXAA-AA!DD0C5C4D2CDF
McAfeeDti!BCCCB14658E8
MicroWorld-eScanGen:Variant.Johnnie.299541
MicrosoftTrojan:Win32/Bazar.KSH!cert
Paloaltogeneric.ml
PandaTrj/CI.A
RisingBackdoor.Bazdor!8.11EA2 (TFE:5:D7lps4KMWb)
SentinelOneStatic AI - Suspicious PE
SophosMal/Isher-Gen
SymantecTrojan.Maltrec.TS
TencentMalware.Win32.Gencirc.11b9535a
TrendMicroTrojan.Win64.BAZALOADER.AA
TrendMicro-HouseCallTrojan.Win64.BAZALOADER.AA
VBA32Backdoor.Bazdor
VIPREGen:Variant.Johnnie.299541
WebrootW32.Trojan.Bazarloader
ZillyaBackdoor.Bazdor.Win32.20
ZoneAlarmMal/Isher-Gen
huorongTrojan/W64.Emotet.f

Network contacts

23.160.192.215

DNS requests

homeclean-heroes.com

Process list

NameCommand line
bcccb14658e8c1bee8107a2c314957c2bd9e505e73012b0aaa18df9fedf99248.exe
cmd.exe"cmd"
DismHost.exe{FD178F27-07E5-4EBC-B719-9553375524DF}