ba55542c6fa12865633d6d24f4a81bffd512791a6e0a9b77f6b17a53e2216659
Classification: Malicious
ba55542c6fa12865633d6d24f4a81bffd512791a6e0a9b77f6b17a53e2216659 is a malicious file sample. Linked to Mustang Panda activity.
Detection summary
- 11 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Intrusion sets: MUSTANG PANDA (G0129)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Ta428 | Maltiverse | 2023-07-04 04:29:44 | 2023-07-05 20:50:42 | malicious-activity | |
| Generic.Malware | Maltiverse | 2023-07-05 11:14:12 | 2023-07-05 11:14:12 | G0129 Mustang Panda |
Tags
apt malwareSample information
- SHA-256
ba55542c6fa12865633d6d24f4a81bffd512791a6e0a9b77f6b17a53e2216659- First indexed
- 2023-07-05 11:14:12
- Last updated
- 2025-08-26 00:06:34
Antivirus detections
| Engine | Detection |
|---|---|
| CAT-QuickHeal | Script.Trojan.47899.GC |
| ESET-NOD32 | Win32/Korplug.VF |
| Detected | |
| Ikarus | Trojan.Win32.Korplug |
| McAfee | Trojan-SmugX.a |
| Microsoft | Trojan:PowerShell/Malgent!MSR |
| Skyhigh | Trojan-SmugX.a |
| Symantec | Trojan Horse |
| TrendMicro | Trojan.Win32.SMUGX.YEDGL.enc |
| TrendMicro-HouseCall | Trojan.Win32.SMUGX.YEDGL.enc |
| Zillya | Trojan.Korplug.Win32.2197 |