winvnc.x86.dll

Classification: Malicious

winvnc.x86.dll is a trojan (Windows executable, 281.0 KB). Flagged by 55% of antivirus engines (74 detections). Linked to Conti malware.

Detection summary

  • 74 antivirus detections (55% detection ratio)
  • 0 IDS alerts
  • 6 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: CONTI (S0575)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Cyber Threat Alliance 2026-08-09 10:08:37 2026-08-26 10:25:40 malicious-activity
Conti MalwarePatrol 2026-03-03 18:28:18 2026-03-03 18:28:18 malicious-activity S0575 Conti
Generic Malware Hybrid-Analysis 2023-10-05 17:15:04 2024-03-14 20:45:08
HackTool.Inject Hybrid-Analysis 2020-12-30 07:15:26 2020-12-30 07:15:26

Tags

ransomware conti

Sample information

Filenames
winvnc.x86.dll
File type
PE32 executable (DLL) (GUI) Intel 80386, for MS Wi ...
Size
287744 bytes
MD5
719a93419dd5123b52961a076d283f21
SHA-1
835030d4709ef6a2a408d0a6d0fe59c0db228000
SHA-256
c50183eed715ec2392249e334940acf66315797a740a8fe782934352fed144c6
First indexed
2020-12-30 07:15:26
Last updated
2026-04-15 03:50:52

Antivirus detections

EngineDetection
LionicHacktool.Win32.Inject.3!c
ElasticWindows.Trojan.CobaltStrike
MicroWorld-eScanGen:Variant.Babar.39204
FireEyeGen:Variant.Babar.39204
McAfeeGenericRXAA-AA!719A93419DD5
Cylanceunsafe
VIPREGen:Variant.Babar.39204
SangforTrojan.Win32.Gimmiv.Vk1s
CrowdStrikewin/grayware_confidence_100% (W)
AlibabaHackTool:Win32/Inject.6f0f8239
K7GWRiskware ( 0040eff71 )
K7AntiVirusRiskware ( 0040eff71 )
BitDefenderThetaGen:NN.ZedlaF.36722.rq4@aCYDNGn
CyrenW32/ABRisk.XKMB-8668
SymantecTrojan Horse
ESET-NOD32Win32/Gimmiv.AH
CynetMalicious (score: 99)
KasperskyHEUR:Trojan.Win32.Generic
BitDefenderGen:Variant.Babar.39204
NANO-AntivirusTrojan.Win32.Inject.iupebg
AvastWin32:Malware-gen
TencentMalware.Win32.Gencirc.115e0e16
EmsisoftGen:Variant.Babar.39204 (B)
F-SecureTrojan.TR/Gimmiv.dhghl
DrWebTool.Inject.80
ZillyaTool.Inject.Win32.8428
TrendMicroPUA.Win32.WINVNC.A
McAfee-GW-EditionBehavesLike.Win32.Infected.dh
SophosHarmony Loader (PUA)
IkarusTrojan.Win32.Gimmiv
GDataGen:Variant.Babar.39204
JiangminHackTool.Inject.bgl
WebrootW32.Trojan.Gen
AviraTR/Gimmiv.dhghl
Antiy-AVLHackTool/Win32.Inject
GridinsoftTrojan.Win32.Downloader.ns
XcitiumMalware@#208igf02pd1mq
ArcabitTrojan.Babar.D9924
ZoneAlarmHEUR:Trojan.Win32.Generic
MicrosoftTrojan:Win32/Malgent
GoogleDetected
AhnLab-V3Trojan/Win.Inject.C5469602
ALYacMisc.HackTool.Meterpreter
MAXmalware (ai score=100)
MalwarebytesMalware.AI.968343446
PandaTrj/CI.A
TrendMicro-HouseCallPUA.Win32.WINVNC.A
RisingHackTool.Inject!8.36B (TFE:5:zv9jVe2jqCF)
SentinelOneStatic AI - Malicious PE
MaxSecureTrojan.Malware.10455307.susgen
FortinetRiskware/Inject.HEUR
AVGWin32:Malware-gen
DeepInstinctMALICIOUS
AVGWin32:Evo-gen [Trj]
AlibabaHackTool:Win32/Inject.626c09c9
AvastWin32:Evo-gen [Trj]
BkavW32.AIDetectMalware
CAT-QuickHealTrojan.Ghanarava.1730356586283f21
CTXdll.trojan.inject
CylanceUnsafe
KasperskyUDS:Trojan.Win32.Generic
KingsoftWin32.Trojan.Generic.a
LionicTrojan.Win32.Gimmiv.4!c
MalwarebytesMalware.AI.4286515083
McAfeeDti!C50183EED715
Paloaltogeneric.ml
SangforRiskware.Win32.Gimmiv.V728
SkyhighBehavesLike.Win32.Infected.dh
SophosMal/Generic-S
TencentMalware.Win32.Gencirc.11dea6f6
TrellixENSGenericRXAA-AA!719A93419DD5
VaristW32/ABTrojan.XKMB-8668
alibabacloudTrojan:Win/Gimmiv.AJ
huorongHackTool/VNCDll.c

Process list

NameCommand line
<Ignored Process>
rundll32.exe"C:\winvnc.x86.dll",#1
<Ignored Process>
rundll32.exe"C:\winvnc.x86.dll",#1
<Ignored Process>
rundll32.exe"C:\winvnc.x86.dll",#1