253f474aa0147fdcf88beaae40f3a23bdadfc98b8dd36ae2d81c387ced2db4f1
Classification: Malicious
253f474aa0147fdcf88beaae40f3a23bdadfc98b8dd36ae2d81c387ced2db4f1 is a backdoor. Detected by 6 antivirus engines. Linked to Earth Lusca activity.
Detection summary
- 6 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Intrusion sets: EARTH LUSCA (G1006)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Earth Lusca | Maltiverse | 2023-08-19 05:11:12 | 2023-08-20 21:20:28 | malicious-activity | G1006 Earth Lusca |
| Calypso | Maltiverse | 2023-08-19 05:11:12 | 2023-08-20 21:20:25 | malicious-activity |
Tags
aptSample information
- SHA-256
253f474aa0147fdcf88beaae40f3a23bdadfc98b8dd36ae2d81c387ced2db4f1- First indexed
- 2023-08-20 21:20:25
- Last updated
- 2026-09-18 11:24:08
Antivirus detections
| Engine | Detection |
|---|---|
| CAT-QuickHeal | Trojan.Agent.45958.GC |
| TrendMicro-HouseCall | Backdoor.Win64.SHADOWPAD.AS.enc |
| ViRobot | BIN.S.Agent.692724 |
| TrendMicro | Backdoor.Win64.SHADOWPAD.AS.enc |
| McAfee-GW-Edition | Trojan.th |
| AhnLab-V3 | Data/BIN.Encoded |