aclui.dll

Classification: Malicious

aclui.dll is a trojan (application/x-dosexec). Detected by 15 antivirus engines. Linked to Bazar malware. 52 sightings, last seen 2026-09-08.

Detection summary

  • 15 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 1 DNS requests

MITRE ATT&CK associations

Malware families: BAZAR (S0534)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-09-08 20:45:06 2026-09-08 20:45:06 malicious-activity
LazarLoader ThreatFox Abuse.ch 2024-06-26 14:55:27 2024-06-28 14:25:08
BazaLoader MalwareBazaar Abuse.ch 2024-06-25 15:25:14 2024-06-25 15:25:14 malicious-activity S0534 Bazar

Tags

win.lazarloader

Sample information

Filenames
c5dc5fd676ab5b877bc86f88485c29d9f74933f8e98a33bddc29f0f3acc5a5b9, aclui.dll
File type
application/x-dosexec
MD5
ee7fbbbdeab3af27c4e9dee5704c102c
SHA-1
369e5ad05fe04873837d40284829e6aae00568f4
SHA-256
c5dc5fd676ab5b877bc86f88485c29d9f74933f8e98a33bddc29f0f3acc5a5b9
First indexed
2024-06-25 16:22:11
Last updated
2026-09-08 20:45:06

Antivirus detections

EngineDetection
AlibabaTrojanBanker:Win64/Latrodectus.45037981
BkavW64.AIDetectMalware
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
Elasticmalicious (moderate confidence)
FortinetW32/PossibleThreat
GoogleDetected
KasperskyTrojan-Banker.Win64.Latrodectus.n
MaxSecureTrojan.Malware.259803577.susgen
McAfeeDti!C5DC5FD676AB
RisingTrojan.Latrodectus!8.19A08 (C64:YzY0OtvN7H6N7X5U)
WebrootW32.Trojan.Gen
ZoneAlarmTrojan-Banker.Win64.Latrodectus.n

DNS requests

barsen.monster