02a28bc6829edef5e8a8f0cc5140056d2842588daea61247a31f9cca69061bbf
Classification: Malicious
02a28bc6829edef5e8a8f0cc5140056d2842588daea61247a31f9cca69061bbf is a trojan. Detected by 50 antivirus engines. Linked to Lazarus Group activity.
Detection summary
- 50 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Intrusion sets: LAZARUS GROUP (G0032)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Lazarus Group | Maltiverse | 2023-04-14 04:16:41 | 2023-04-15 11:52:59 | malicious-activity | G0032 Lazarus Group |
| Roaming Mantis | Maltiverse | 2023-04-14 04:16:43 | 2023-04-15 11:52:58 | malicious-activity |
Tags
aptSample information
- SHA-256
02a28bc6829edef5e8a8f0cc5140056d2842588daea61247a31f9cca69061bbf- First indexed
- 2023-04-15 11:52:58
- Last updated
- 2026-03-27 02:24:51
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.Agent.1667072B |
| AVG | Win32:Malware-gen |
| AhnLab-V3 | Trojan/Win32.Agent.C3549472 |
| Alibaba | TrojanDownloader:Win32/JakyllHyde.719b0e64 |
| Antiy-AVL | Trojan/Win32.JakyllHyde |
| Arcabit | Trojan.Bulz.D9EDC9 |
| Avast | Win32:Malware-gen |
| BitDefender | Gen:Variant.Bulz.650697 |
| CAT-QuickHeal | Trojan.Ghanarava.165151021975ba5f |
| CTX | dll.unknown.bulz |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| DeepInstinct | MALICIOUS |
| ESET-NOD32 | a variant of Win32/TrojanDownloader.NukeSped.H |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Variant.Bulz.650697 (B) |
| FireEye | Gen:Variant.Bulz.650697 |
| Fortinet | W32/JakyllHyde!tr |
| GData | Gen:Variant.Bulz.650697 |
| Detected | |
| Ikarus | Trojan.Agent |
| Jiangmin | Trojan.JakyllHyde.v |
| K7AntiVirus | Trojan-Downloader ( 0055b72c1 ) |
| K7GW | Trojan-Downloader ( 0055b72c1 ) |
| Kaspersky | HEUR:Trojan.Win32.JakyllHyde.gen |
| Lionic | Trojan.Win32.JakyllHyde.4!c |
| MaxSecure | Trojan.Malware.73854665.susgen |
| McAfee | Trojan-FVAJ!0493F4062899 |
| McAfeeD | ti!02A28BC6829E |
| MicroWorld-eScan | Gen:Variant.Bulz.650697 |
| Microsoft | Trojan:Win32/Casdet!rfn |
| NANO-Antivirus | Trojan.Win32.JakyllHyde.jsmevy |
| Paloalto | generic.ml |
| Panda | Trj/GdSda.A |
| Sangfor | Downloader.Win32.Lazarus.IOC |
| Skyhigh | Trojan-FVAJ!0493F4062899 |
| Sophos | Mal/Generic-S |
| Symantec | ML.Attribute.HighConfidence |
| TACHYON | Trojan/W32.Agent.1667072.CH |
| Tencent | Malware.Win32.Gencirc.10bf0e23 |
| TrendMicro | TROJ_MDLOADER.ZJGL-A |
| TrendMicro-HouseCall | TROJ_MDLOADER.ZJGL-A |
| VBA32 | Trojan.JakyllHyde |
| VIPRE | Gen:Variant.Bulz.650697 |
| Varist | W32/ABRisk.VPAA-2782 |
| ViRobot | Trojan.Win32.S.Agent.1667072.Y |
| Yandex | Trojan.JakyllHyde!3l8Cqc83a9E |
| Zillya | Trojan.JakyllHyde.Win32.27 |
| alibabacloud | Trojan[downloader]:Win/NukeSped.H |