05ed1feda4a1684f8f7907644500948f4488a60ecb0740f708e08c1812b7f122
Classification: Malicious
05ed1feda4a1684f8f7907644500948f4488a60ecb0740f708e08c1812b7f122 is a backdoor. Detected by 4 antivirus engines. Linked to Earth Lusca activity.
Detection summary
- 4 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Intrusion sets: EARTH LUSCA (G1006)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Earth Lusca | Maltiverse | 2023-08-19 05:11:12 | 2023-08-20 21:20:28 | malicious-activity | G1006 Earth Lusca |
| Calypso | Maltiverse | 2023-08-19 05:11:13 | 2023-08-20 21:20:24 | malicious-activity |
Tags
aptSample information
- SHA-256
05ed1feda4a1684f8f7907644500948f4488a60ecb0740f708e08c1812b7f122- First indexed
- 2023-08-20 21:20:24
- Last updated
- 2026-09-18 11:24:17
Antivirus detections
| Engine | Detection |
|---|---|
| ESET-NOD32 | a variant of Generik.NVGSNTG |
| TrendMicro-HouseCall | Backdoor.Win64.SHADOWPAD.AS.enc |
| TrendMicro | Backdoor.Win64.SHADOWPAD.AS.enc |
| AhnLab-V3 | Data/BIN.Encoded |