4547914e17c127d9b53bbc9d44de0e5b867f1a86d2e5ede828cd3188ed7fe838

Classification: Malicious

4547914e17c127d9b53bbc9d44de0e5b867f1a86d2e5ede828cd3188ed7fe838 is a malicious file sample. Linked to Mustang Panda activity.

Detection summary

  • 36 antivirus detections (51% detection ratio)
  • 0 IDS alerts
  • 7 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: MUSTANG PANDA (G0129)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2023-07-04 19:45:03 2024-12-12 17:45:05
Ta428 Maltiverse 2023-07-04 04:29:44 2023-07-05 20:50:39 malicious-activity
Generic.Malware Maltiverse 2023-07-05 11:14:10 2023-07-05 11:14:10 G0129 Mustang Panda

Tags

apt malware backdoor plugx

Sample information

Filenames
4547914e17c127d9b53bbc9d44de0e5b867f1a86d2e5ede828cd3188ed7fe838
File type
PE32 executable (DLL) (GUI) Intel 80386, for MS Wi ...
Size
77824 bytes
MD5
b03636cdd9740c91b89ca50cda27da49
SHA-1
426661c503c90655b001b1499a530f295f25551b
SHA-256
4547914e17c127d9b53bbc9d44de0e5b867f1a86d2e5ede828cd3188ed7fe838
First indexed
2023-07-04 19:21:53
Last updated
2024-12-12 17:45:05

Antivirus detections

EngineDetection
BkavW32.AIDetectMalware
LionicTrojan.Win32.Generic.4!c
MicroWorld-eScanTrojan.GenericKD.67413522
FireEyeTrojan.GenericKD.67413522
McAfeeArtemis!B03636CDD974
Cylanceunsafe
SangforTrojan.Win32.Agent.Vjoo
K7AntiVirusTrojan ( 005940101 )
K7GWTrojan ( 005940101 )
CyrenW32/ABRisk.SXAW-5046
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of Win32/Korplug.TX
APEXMalicious
CynetMalicious (score: 100)
KasperskyTrojan.Win32.Dllhijacker.aex
BitDefenderTrojan.GenericKD.67413522
AvastWin32:MalwareX-gen [Trj]
Rising[email protected] (RDML:vm91SuP3nuP/7ivsQQe8SQ)
SophosMal/Generic-S
VIPRETrojan.GenericKD.67413522
McAfee-GW-EditionBehavesLike.Win32.BadFile.lh
EmsisoftTrojan.GenericKD.67413522 (B)
GDataTrojan.GenericKD.67413522
WebrootW32.Trojan.GenKD
Antiy-AVLTrojan/Win32.Korplug
ArcabitTrojan.Generic.D404A612
ZoneAlarmTrojan.Win32.Dllhijacker.aex
MicrosoftTrojan:Win32/Casdet!rfn
GoogleDetected
AhnLab-V3Trojan/Win.Generic.C5449325
BitDefenderThetaGen:NN.ZedlaF.36270.eq4@aO0Pdoj
ALYacTrojan.Korplug.A
MAXmalware (ai score=81)
TrendMicro-HouseCallTROJ_GEN.R002H09F923
AVGWin32:MalwareX-gen [Trj]
DeepInstinctMALICIOUS

Process list

NameCommand line
<Ignored Process>
rundll32.exe"C:\4547914e17c127d9b53bbc9d44de0e5b867f1a86d2e5ede828cd3188ed7fe838.dll",#1 /verbose
<Ignored Process>
rundll32.exe"C:\4547914e17c127d9b53bbc9d44de0e5b867f1a86d2e5ede828cd3188ed7fe838.dll",#1
WerFault.exe-u -p 2804 -s 652
WerFault.exe-u -p 2804 -s 652
WerFault.exe-u -p 2804 -s 652