486a9a79bbb81abee2e81679ace6267c3f3e37d9b8c8074f9ec7aebc9be75cdd
Classification: Malicious
486a9a79bbb81abee2e81679ace6267c3f3e37d9b8c8074f9ec7aebc9be75cdd is a trojan (script). Detected by 61 antivirus engines. Linked to Invisibleferret malware.
Detection summary
- 61 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: INVISIBLEFERRET (S1245)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Cyber Threat Alliance | 2026-09-09 10:04:45 | 2026-10-16 10:13:40 | malicious-activity | |
| Invisibleferret | Triage | 2026-04-11 11:07:11 | 2026-04-11 11:07:11 | malicious-activity | S1245 InvisibleFerret |
| Generic.Malware | MalwareBazaar Abuse.ch | 2024-09-19 05:47:04 | 2024-09-19 05:47:04 | malicious-activity |
Tags
invisibleferretSample information
- Filenames
- 486a9a79bbb81abee2e81679ace6267c3f3e37d9b8c8074f9ec7aebc9be75cdd.py
- File type
- text/x-script.python
- MD5
cd2b5ea77c71f186b512477392786338- SHA-1
af45ce4d0ab784c3b726dcfc4cc6b75256874ec5- SHA-256
486a9a79bbb81abee2e81679ace6267c3f3e37d9b8c8074f9ec7aebc9be75cdd- First indexed
- 2024-09-19 07:19:22
- Last updated
- 2026-09-03 01:21:19
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.Python.NukeSped |
| AVG | Python:Nukesped-E [Trj] |
| AhnLab-V3 | Trojan/Python.Stealer.SC203811 |
| Arcabit | Trojan.Generic.D22DD5A9 |
| Avast | Python:Nukesped-E [Trj] |
| BitDefender | Trojan.Generic.36558249 |
| Bkav | W32.Common.B7FC8190 |
| CTX | python.trojan.python |
| ESET-NOD32 | Python/NukeSped.E |
| Emsisoft | Trojan.Generic.36558249 (B) |
| FireEye | Trojan.Generic.36558249 |
| Fortinet | Python/NukeSped.E!tr |
| GData | Trojan.Generic.36558249 |
| Detected | |
| Ikarus | Trojan-Spy.Python.Agent |
| Kingsoft | Win32.Troj.Undef.a |
| Lionic | Trojan.Script.Python.4!c |
| MicroWorld-eScan | Trojan.Generic.36558249 |
| Microsoft | Trojan:Python/NukeSped.NAT!MTB |
| Sophos | Troj/PyDl-J |
| Symantec | Trojan.Gen.NPE |
| TrendMicro | Trojan.Win32.FRS.VSNW0AJ24 |
| TrendMicro-HouseCall | Trojan.Win32.FRS.VSNW0AJ24 |
| VIPRE | Trojan.Generic.36558249 |
| Varist | ABTrojan.JUHO- |
| VirIT | Trojan.PY.NukeSpd.A |
| alibabacloud | Trojan:Python/NukeSped.E |
| huorong | Trojan/Generic!B33F39ADE4E60F74 |
| Arcabit | Trojan.Generic.D242EF4D |
| Avira | TR/AVI.Agent.486a9a |
| BitDefender | Trojan.Generic.37941069 |
| CAT-QuickHeal | cld.script.trojan.1759855357 |
| Cynet | Malicious (score: 99) |
| DrWeb | Python.BackDoor.206 |
| ESET-NOD32 | Python/DeceptiveDevelopment.I |
| Emsisoft | Trojan.Generic.37941069 (B) |
| F-Secure | Trojan.TR/AVI.Agent.486a9a |
| GData | Trojan.Generic.37941069 |
| Ikarus | Trojan.Python.Nukesped |
| Kaspersky | Trojan.Python.Agent.lg |
| MicroWorld-eScan | Trojan.Generic.37941069 |
| Rising | Backdoor.InvisibleFerret/Python!9.20326 (XSE:nVsrEVeYiY5BOjeybXbzIw) |
| Skyhigh | Python/NukeSped.e |
| Tencent | Win32.Trojan.Agent.Cnhl |
| TrellixENS | Python/NukeSped.e |
| VIPRE | Trojan.Generic.37941069 |
| Varist | PY/NukeSped.A |
| ZoneAlarm | Troj/PyDl-J |
| alibabacloud | Trojan:Python/DeceptiveDevelopment.B |
| huorong | TrojanSpy/Python.Stealer.ak |
| AVG | Python:Nukesped-BT [Trj] |
| Antiy-AVL | Trojan/Python.NukeSped |
| Avast | Python:Nukesped-BT [Trj] |
| Avira | TR/Nukesped.BT |
| ESET-NOD32 | Python/DeceptiveDevelopment.AB trojan |
| F-Secure | Trojan.TR/Nukesped.BT |
| Fortinet | Python/DeceptiveDevelopment.I!tr |
| McAfeeD | ti!486A9A79BBB8 |
| Rising | Stealer.Agent/Python!1.13716 (CLASSIC) |
| Tencent | Win32.Trojan.Python.Cnhl |
| alibabacloud | Trojan:Python/DeceptiveDevelopment.AK |