07183a60ebcb02546c53e82d92da3ddcf447d7a1438496c4437ec06b4d9eb287
Classification: Malicious
07183a60ebcb02546c53e82d92da3ddcf447d7a1438496c4437ec06b4d9eb287 is a trojan (script). Detected by 64 antivirus engines. Linked to Invisibleferret malware.
Detection summary
- 64 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: INVISIBLEFERRET (S1245)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Cyber Threat Alliance | 2026-10-10 10:10:21 | 2026-10-10 10:10:21 | malicious-activity | |
| Invisibleferret | Triage | 2026-04-11 11:06:59 | 2026-04-11 11:06:59 | malicious-activity | S1245 InvisibleFerret |
| Generic.Malware | MalwareBazaar Abuse.ch | 2024-09-19 05:47:09 | 2024-09-19 05:47:09 | malicious-activity |
Tags
invisibleferretSample information
- Filenames
- 07183a60ebcb02546c53e82d92da3ddcf447d7a1438496c4437ec06b4d9eb287.py
- File type
- text/x-script.python
- MD5
b4a46c1738473323590d766704f941f3- SHA-1
8c0dfdd7236b56589b1a32bd3644fe38c7d40da4- SHA-256
07183a60ebcb02546c53e82d92da3ddcf447d7a1438496c4437ec06b4d9eb287- First indexed
- 2024-09-19 07:19:21
- Last updated
- 2026-09-03 04:07:49
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.Python.NukeSped |
| AVG | Python:Nukesped-E [Trj] |
| AhnLab-V3 | Trojan/Python.Stealer.SC203810 |
| Arcabit | Trojan.Generic.D22F15E6 |
| Avast | Python:Nukesped-E [Trj] |
| BitDefender | Trojan.Generic.36640230 |
| Bkav | W32.Common.0F40E6F5 |
| CTX | python.trojan.python |
| DrWeb | Python.BackDoor.206 |
| ESET-NOD32 | Python/NukeSped.E |
| Emsisoft | Trojan.Generic.36640230 (B) |
| FireEye | Trojan.Generic.36640230 |
| Fortinet | Python.NUKESPED.E!tr |
| GData | Trojan.Generic.36640230 |
| Detected | |
| Ikarus | Trojan-Spy.Python.Agent |
| Kingsoft | Win32.Troj.Undef.a |
| Lionic | Trojan.Script.Python.4!c |
| McAfee | Python/NukeSped.e |
| MicroWorld-eScan | Trojan.Generic.36640230 |
| Microsoft | Trojan:Python/NukeSped.NAT!MTB |
| Skyhigh | Python/NukeSped.e |
| Sophos | Troj/InfoStl-DQ |
| Symantec | Trojan.Gen.NPE |
| TrendMicro | TROJ_FRS.0NA104JA24 |
| TrendMicro-HouseCall | TROJ_FRS.0NA104JA24 |
| VIPRE | Trojan.Generic.36640230 |
| Varist | ABTrojan.ORLT- |
| VirIT | Trojan.PY.NukeSpd.A |
| alibabacloud | Trojan:Python/NukeSped.E |
| huorong | Trojan/Generic!2D89050E713BF4B7 |
| Arcabit | Trojan.Generic.D23CCA70 |
| Avira | TR/AVI.Agent.07183a |
| BitDefender | Trojan.Generic.37538416 |
| CAT-QuickHeal | cld.script.trojan.1759855357 |
| Cynet | Malicious (score: 99) |
| ESET-NOD32 | Python/DeceptiveDevelopment.I |
| Emsisoft | Trojan.Generic.37538416 (B) |
| F-Secure | Trojan.TR/AVI.Agent.07183a |
| GData | Trojan.Generic.37538416 |
| Ikarus | Trojan.Python.Nukesped |
| Kaspersky | Trojan.Python.Agent.lg |
| MicroWorld-eScan | Trojan.Generic.37538416 |
| Rising | Backdoor.InvisibleFerret/Python!9.20326 (XSE:nVsrEVeYiY5BOjeybXbzIw) |
| Tencent | Win32.Trojan.Agent.Rzfl |
| TrellixENS | Python/NukeSped.e |
| TrendMicro-HouseCall | Backdoor.Python.INVISIBLEFERRET.SMTPTMA |
| VIPRE | Trojan.Generic.37538416 |
| Varist | PY/NukeSped.A |
| ViRobot | Trojan.Win.S.PythonScript.26188 |
| ZoneAlarm | Troj/InfoStl-DQ |
| alibabacloud | Trojan:Python/DeceptiveDevelopment.I |
| huorong | TrojanSpy/Python.Stealer.ak |
| Antiy-AVL | Trojan/Python.NukeSped |
| ESET-NOD32 | Python/DeceptiveDevelopment.Y trojan |
| Fortinet | Python/DeceptiveDevelopment.I!tr |
| Rising | Stealer.Agent/Python!1.13716 (CLASSIC) |
| Tencent | Win32.Trojan.Python.Rzfl |
| AVG | Python:Nukesped-BT [Trj] |
| Avast | Python:Nukesped-BT [Trj] |
| Avira | TR/Nukesped.BT |
| ESET-NOD32 | Python/DeceptiveDevelopment.AB trojan |
| F-Secure | Trojan.TR/Nukesped.BT |
| McAfeeD | ti!07183A60EBCB |