f3d173ab5408029e92906b8a71474a6f32722d09a89a53b977b5c40ac6e8805c_stack.py

Classification: Malicious

f3d173ab5408029e92906b8a71474a6f32722d09a89a53b977b5c40ac6e8805c_stack.py is a trojan. Detected by 18 antivirus engines. Linked to Invisibleferret malware.

Detection summary

  • 18 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: INVISIBLEFERRET (S1245)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Invisibleferret Triage 2026-04-11 11:16:50 2026-04-11 11:16:50 malicious-activity S1245 InvisibleFerret

Tags

invisibleferret adware discovery pdf spyware

Sample information

Filenames
f3d173ab5408029e92906b8a71474a6f32722d09a89a53b977b5c40ac6e8805c_stack.py
SHA-256
c3fe555a2c53e299bf5733fd5f369a9c4f387d9a7a8dc05c62babdf7d79e1d8a
First indexed
2026-04-11 11:16:50
Last updated
2026-10-05 02:12:13

Antivirus detections

EngineDetection
AVGBV:Agent-CAW [Trj]
AvastBV:Agent-CAW [Trj]
AviraTR/BAT.Agent.CAW
ClamAVMultios.Infostealer.InvisibleFerret-10037451-0
CynetMalicious (score: 99)
F-SecureTrojan.TR/BAT.Agent.CAW
IkarusTrojan-Spy.Python.Agent
LionicTrojan.Script.Python.i!c
McAfeeDti!C3FE555A2C53
MicroWorld-eScanGeneric.PY.Stealer.F.40CB8B2E
RisingStealer.Browser/Python!1.102B0 (CLASSIC)
SkyhighPython/NukeSped.h
SymantecInfostealer
TencentWin32.Trojan.Python.Xylw
TrellixENSPython/NukeSped.h
VIPREGeneric.PY.Stealer.F.40CB8B2E
alibabacloudTrojan[stealer]:Python/DeceptiveDevelopment.C
huorongTrojan/Python.NukeSped.a