aea823d6446fbf9059391125a9b7fceb9f433b846275d28dc5f433645984a683.exe

Classification: Malicious

aea823d6446fbf9059391125a9b7fceb9f433b846275d28dc5f433645984a683.exe is a malicious file sample. Linked to Sandworm Team, Earth Lusca activity.

Detection summary

  • 75 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: SANDWORM TEAM (G0034) EARTH LUSCA (G1006)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Electrum Maltiverse 2023-03-02 04:15:22 2023-03-03 14:34:14 malicious-activity G0034 Sandworm Team
Earth Lusca Maltiverse 2023-03-02 04:15:22 2023-03-03 14:34:11 malicious-activity G1006 Earth Lusca
Spyware VM-Ray 2022-12-14 16:37:40 2022-12-14 16:37:40
Injector VM-Ray 2022-12-14 16:37:40 2022-12-14 16:37:40

Tags

apt

Sample information

Filenames
aea823d6446fbf9059391125a9b7fceb9f433b846275d28dc5f433645984a683.exe
File type
PE32 executable (GUI) Intel 80386, for MS Windows
SHA-256
aea823d6446fbf9059391125a9b7fceb9f433b846275d28dc5f433645984a683
First indexed
2022-12-14 14:42:47
Last updated
2026-01-27 09:38:37

Antivirus detections

EngineDetection
LionicTrojan.Win32.Strab.4!c
MicroWorld-eScanGen:Variant.MSILHeracles.56017
McAfeeArtemis!78601B24A38D
CylanceUnsafe
ZillyaTrojan.GenKryptik.Win32.161630
SangforSuspicious.Win32.Save.a
CrowdStrikewin/malicious_confidence_100% (W)
AlibabaTrojan:MSIL/TitanStealer.c3224957
K7GWTrojan ( 0059a3d01 )
K7AntiVirusTrojan ( 0059a3d01 )
BitDefenderThetaGen:NN.ZemsilF.36276.@x0@a0tbUrg
VirITTrojan.Win32.Genus.NHH
CyrenW32/ABRisk.KUVM-4718
SymantecTrojan.Gen.2
Elasticmalicious (high confidence)
ESET-NOD32a variant of MSIL/GenKryptik.GBSP
APEXMalicious
Paloaltogeneric.ml
KasperskyHEUR:Trojan.MSIL.Strab.gen
BitDefenderGen:Variant.MSILHeracles.56017
NANO-AntivirusTrojan.Win32.Strab.jtwodo
AvastWin32:Trojan-gen
RisingMalware.Obfus/[email protected] (RDM.MSIL2:UtOvRtNcHTpqWRn7/b1lhg)
EmsisoftGen:Variant.MSILHeracles.56017 (B)
DrWebTrojan.PWS.Steam.34324
VIPREGen:Variant.MSILHeracles.56017
TrendMicroTrojan.Win32.PRIVATELOADER.YXCLNZ
McAfee-GW-EditionArtemis!Trojan
Trapminesuspicious.low.ml.score
FireEyeGeneric.mg.78601b24a38dd397
SophosMal/Generic-S
IkarusTrojan.MSIL.Krypt
WebrootW32.Trojan.Gen
GoogleDetected
AviraTR/Kryptik.krrbj
Antiy-AVLTrojan/MSIL.GenKryptik
Kingsoftmalware.kb.c.(kcloud)
MicrosoftTrojan:MSIL/TitanStealer!MTB
GridinsoftRansom.Win32.Sabsik.ns
XcitiumMalware@#5zl5tf9b205i
ArcabitTrojan.MSILHeracles.DDAD1
ViRobotTrojan.Win32.S.Agent.9916928
ZoneAlarmHEUR:Trojan.MSIL.Strab.gen
GDataGen:Variant.MSILHeracles.56017
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win.Injection.C5337031
ALYacTrojan.Stealer.Titan
MAXmalware (ai score=81)
VBA32CIL.StupidPInvoker-1.Heur
MalwarebytesTrojan.Crypt.MSIL
TrendMicro-HouseCallTrojan.Win32.PRIVATELOADER.YXCLNZ
TencentMsil.Trojan.Strab.Vimw
MaxSecureTrojan.Malware.300983.susgen
FortinetMSIL/GenKryptik.GBSP!tr
AVGWin32:Trojan-gen
PandaTrj/Chgt.AB
AviraTR/Dropper.MSIL.Gen
BkavW32.AIDetectMalware.CS
CAT-QuickHealTrojan.Ghanarava.1728957315ba52bd
CTXexe.trojan.msil
DeepInstinctMALICIOUS
F-SecureTrojan.TR/Dropper.MSIL.Gen
GridinsoftTrojan.Heur!.03013281
IkarusTrojan.MSIL.Crypt
KingsoftMSIL.Trojan.Strab.gen
MaxSecureTrojan.Malware.124038686.susgen
McAfeeDti!AEA823D6446F
SentinelOneStatic AI - Malicious PE
SkyhighBehavesLike.Win32.Generic.tc
SymantecTrojan Horse
TencentMalware.Win32.Gencirc.13b7e15c
TrendMicroTROJ_GEN.R002C0DJ524
TrendMicro-HouseCallTROJ_GEN.R002C0DJ524
VaristW32/ABRisk.KUVM-4718
alibabacloudTrojan:MSIL/TitanStealer.Gen