10f86be3e564f2e463e45420eb5f9fbdb14f7427eac665cd9cc7901efbc4cc59
Classification: Malicious
10f86be3e564f2e463e45420eb5f9fbdb14f7427eac665cd9cc7901efbc4cc59 is a trojan (script). Detected by 45 antivirus engines. Linked to Invisibleferret malware.
Detection summary
- 45 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: INVISIBLEFERRET (S1245)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Cyber Threat Alliance | 2026-08-11 10:20:12 | 2026-10-16 10:15:20 | malicious-activity | |
| Invisibleferret | Triage | 2026-04-11 11:03:01 | 2026-04-11 11:03:01 | malicious-activity | S1245 InvisibleFerret |
| Generic.Malware | MalwareBazaar Abuse.ch | 2024-09-19 05:47:27 | 2024-09-19 05:47:27 | malicious-activity |
Tags
invisibleferretSample information
- Filenames
- 10f86be3e564f2e463e45420eb5f9fbdb14f7427eac665cd9cc7901efbc4cc59.py
- File type
- text/x-script.python
- MD5
ad98bec0fe9e779451cdefceb457c9b1- SHA-1
ff46b2146781484909271f1e214b86249ec9dd16- SHA-256
10f86be3e564f2e463e45420eb5f9fbdb14f7427eac665cd9cc7901efbc4cc59- First indexed
- 2024-09-19 07:19:20
- Last updated
- 2026-07-29 14:42:30
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.Python.NukeSped |
| AVG | Python:Nukesped-E [Trj] |
| AhnLab-V3 | Trojan/Python.Agent.SC203784 |
| Arcabit | Trojan.Generic.D22DD589 |
| Avast | Python:Nukesped-E [Trj] |
| Avira | TR/Agent.htrho |
| BitDefender | Trojan.Generic.36558217 |
| Bkav | W32.Common.6BD88ECE |
| CTX | python.trojan.python |
| Cynet | Malicious (score: 99) |
| ESET-NOD32 | Python/NukeSped.E |
| Emsisoft | Trojan.Generic.36558217 (B) |
| F-Secure | Trojan.TR/Agent.htrho |
| FireEye | Trojan.Generic.36558217 |
| Fortinet | Python/NukeSped.E!tr |
| GData | Trojan.Generic.36558217 |
| Detected | |
| Ikarus | Trojan.Python.Nukesped |
| Kingsoft | Script.Troj.Generic.2027343 |
| Lionic | Trojan.Script.Python.4!c |
| MicroWorld-eScan | Trojan.Generic.36558217 |
| Microsoft | Trojan:Python/NukeSped.NAT!MTB |
| Sophos | Troj/PyDl-J |
| Symantec | OSX.Trojan.Gen |
| Tencent | Win32.Trojan.Agent.Gjgl |
| TrendMicro | TROJ_FRS.0NA104JA24 |
| TrendMicro-HouseCall | TROJ_FRS.0NA104JA24 |
| VIPRE | Trojan.Generic.36558217 |
| Varist | ABTrojan.NNJZ- |
| VirIT | Trojan.PY.NukeSpd.A |
| alibabacloud | Trojan:Python/NukeSped.E |
| huorong | Trojan/Generic!03F2ABA5341A11CD |
| CAT-QuickHeal | cld.script.trojan.1759876603 |
| DrWeb | Python.BackDoor.206 |
| ESET-NOD32 | Python/DeceptiveDevelopment.I |
| Kaspersky | Trojan.Python.Agent.lf |
| Rising | Backdoor.InvisibleFerret/Python!9.20326 (XSE:nVsrEVeYiY5BOjeybXbzIw) |
| Skyhigh | Python/NukeSped.e |
| TrellixENS | Python/NukeSped.e |
| TrendMicro-HouseCall | Backdoor.Python.INVISIBLEFERRET.SMTPTMA |
| Varist | PY/NukeSped.A |
| ViRobot | Trojan.Win.S.PythonScript.25561 |
| ZoneAlarm | Troj/PyDl-J |
| alibabacloud | Trojan:Python/DeceptiveDevelopment.I |
| huorong | TrojanSpy/Python.Stealer.ak |