2627b7c827404ee49271bfc6bb152e52cf28e35c4bef1ad256018c5c08daea21
Classification: Malicious
2627b7c827404ee49271bfc6bb152e52cf28e35c4bef1ad256018c5c08daea21 is a trojan. Detected by 66 antivirus engines. Linked to Lazarus Group activity.
Detection summary
- 66 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Intrusion sets: LAZARUS GROUP (G0032)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Roaming Mantis | Maltiverse | 2023-04-13 04:20:44 | 2023-04-14 02:04:22 | malicious-activity | |
| Lazarus Group | Maltiverse | 2023-04-13 04:28:50 | 2023-04-14 02:04:19 | malicious-activity | G0032 Lazarus Group |
Tags
aptSample information
- SHA-256
2627b7c827404ee49271bfc6bb152e52cf28e35c4bef1ad256018c5c08daea21- First indexed
- 2023-04-14 02:04:19
- Last updated
- 2026-09-12 00:54:31
Antivirus detections
| Engine | Detection |
|---|---|
| Lionic | Trojan.Win32.Razy.4!c |
| Elastic | malicious (moderate confidence) |
| Cynet | Malicious (score: 99) |
| ALYac | Trojan.Agent.406528M |
| Cylance | unsafe |
| Zillya | Trojan.NukeSped.Win64.77 |
| Sangfor | Trojan.Win32.Ymacco.AA07 |
| K7AntiVirus | Trojan ( 0056688b1 ) |
| Alibaba | Trojan:Win64/NukeSped.2aa0e870 |
| K7GW | Trojan ( 0056688b1 ) |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Symantec | ML.Attribute.HighConfidence |
| ESET-NOD32 | a variant of Win64/NukeSped.DD |
| Paloalto | generic.ml |
| Kaspersky | Trojan.Win64.Agentb.gf |
| BitDefender | Gen:Variant.Mikey.113187 |
| NANO-Antivirus | Trojan.Win64.NukeSped.hmhslf |
| MicroWorld-eScan | Gen:Variant.Mikey.113187 |
| Avast | Win64:TrojanX-gen [Trj] |
| Rising | Trojan.NukeSped!8.3184 (TFE:5:xOLAlcKm2cM) |
| Emsisoft | Gen:Variant.Mikey.113187 (B) |
| F-Secure | Heuristic.HEUR/AGEN.1301805 |
| DrWeb | BackDoor.NukeSped.38 |
| VIPRE | Gen:Variant.Mikey.113187 |
| TrendMicro | Trojan.Win64.NUKESPED.K |
| McAfee-GW-Edition | Generic trojan.ma |
| FireEye | Gen:Variant.Mikey.113187 |
| Sophos | Mal/Generic-S |
| Ikarus | Trojan.Win64.Nukesped |
| Avira | HEUR/AGEN.1301805 |
| Antiy-AVL | Trojan[APT]/Win32.Lazarus |
| Microsoft | Trojan:Win32/Casdet!rfn |
| Arcabit | Trojan.Mikey.D1BA23 |
| ViRobot | Trojan.Win64.S.Agent.1195520 |
| ZoneAlarm | Trojan.Win64.Agentb.gf |
| GData | Gen:Variant.Mikey.113187 |
| Detected | |
| AhnLab-V3 | Trojan/Win32.Akdoor.R335332 |
| McAfee | Artemis!1BD0CA304CDE |
| MAX | malware (ai score=100) |
| VBA32 | Trojan.Win64.Agentb |
| TrendMicro-HouseCall | Trojan.Win64.NUKESPED.K |
| Tencent | Win64.Trojan.Agentb.Itgl |
| Yandex | Trojan.Agent!skkkHE1YEF4 |
| MaxSecure | Trojan.Malware.1728101.susgen |
| Fortinet | W64/NukeSped.DD!tr |
| AVG | Win64:TrojanX-gen [Trj] |
| DeepInstinct | MALICIOUS |
| Bkav | W32.Common.5B1231E9 |
| CAT-QuickHeal | Trojan.Ghanarava.1681329923285a72 |
| CTX | dll.trojan.nukesped |
| Cylance | Unsafe |
| Cynet | Malicious (score: 100) |
| Elastic | malicious (high confidence) |
| Lionic | Trojan.Win32.NukeSped.4!c |
| Malwarebytes | Mimikatz.Spyware.Stealer.DDS |
| McAfee | Generic .ma |
| McAfeeD | ti!2627B7C82740 |
| Panda | Trj/CI.A |
| Sangfor | Trojan.Win32.Lazarus.IOC |
| Skyhigh | Generic trojan.ma |
| Symantec | Trojan Horse |
| TACHYON | Trojan/W64.Agent.1195520 |
| Tencent | Malware.Win32.Gencirc.14571a90 |
| Varist | W64/ABTrojan.FNBC-2007 |
| alibabacloud | Trojan:Win/NukeSped.DF |