c65c435737ac02132d9dfeb6ec1d7d903648f61ecdda8a85b4250f064cb4673f
Classification: Malicious
c65c435737ac02132d9dfeb6ec1d7d903648f61ecdda8a85b4250f064cb4673f is a trojan (Linux ELF executable, 759.8 KB). Linked to Threat Group-3390 activity.
Detection summary
- 56 antivirus detections (42% detection ratio)
- 0 IDS alerts
- 3 processes observed
- 0 contacted hosts
- 0 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Emissary Panda |
Maltiverse |
2023-03-02 04:14:48 |
2023-03-03 14:34:25 |
malicious-activity
|
G0027 Threat Group-3390
|
| Generic Malware |
Hybrid-Analysis |
2023-03-02 15:45:03 |
2023-03-02 15:45:03 |
|
|
Sample information
- Filenames
- c65c435737ac02132d9dfeb6ec1d7d903648f61ecdda8a85b4250f064cb4673f.elf
- File type
- ELF 64-bit LSB executable, x86-64, version 1 (GNU/ ...
- Size
- 778000 bytes
- MD5
f1009ec318797d6541ad440545062082- SHA-1
18fa483fc28cd011bc023af3d11390169988d1e3- SHA-256
c65c435737ac02132d9dfeb6ec1d7d903648f61ecdda8a85b4250f064cb4673f- First indexed
- 2023-03-02 15:32:33
- Last updated
- 2026-09-24 00:37:27
Antivirus detections
| Engine | Detection |
|---|
| Lionic | Trojan.Linux.Linux.4!c |
| MicroWorld-eScan | Trojan.Linux.Generic.273916 |
| FireEye | Trojan.Linux.Generic.273916 |
| ALYac | Trojan.Linux.Generic.273916 |
| VIPRE | Trojan.Linux.Generic.273916 |
| Arcabit | Trojan.Linux.Generic.D42DFC |
| Symantec | Trojan.Gen.NPE |
| ESET-NOD32 | a variant of Linux/LuckyMouse.B |
| TrendMicro-HouseCall | Trojan.Linux.ZYX.USELVK722 |
| Avast | ELF:Agent-BUJ [Trj] |
| Kaspersky | HEUR:Trojan.Linux.Agent.gen |
| BitDefender | Trojan.Linux.Generic.273916 |
| Tencent | Linux.Trojan.Agent.Azlw |
| TrendMicro | Trojan.Linux.ZYX.USELVK722 |
| McAfee-GW-Edition | Artemis!Trojan |
| Emsisoft | Trojan.Linux.Generic.273916 (B) |
| Avira | LINUX/Agent.ujsax |
| Antiy-AVL | Trojan/Linux.LuckyMouse.b |
| Microsoft | Trojan:Linux/Multiverze |
| GData | Trojan.Linux.Generic.273916 |
| Cynet | Malicious (score: 99) |
| McAfee | RDN/Generic.dx |
| MAX | malware (ai score=83) |
| Rising | Trojan.Agent/Linux!8.13268 (CLOUD) |
| Fortinet | PossibleThreat |
| AVG | ELF:Agent-BUJ [Trj] |
| Panda | ELF/TrojanGen.A |
| ALYac | Trojan.Linux.SysUpdate |
| AhnLab-V3 | Backdoor/Linux.SysUpdate.778000 |
| Arcabit | Trojan.Generic.D2484FCC |
| BitDefender | Trojan.Generic.38293452 |
| CTX | elf.trojan.luckymouse |
| DrWeb | Linux.BackDoor.SysUpdate.2 |
| ESET-NOD32 | Linux/LuckyMouse.B trojan |
| Emsisoft | Trojan.Generic.38293452 (B) |
| GData | Trojan.Generic.38293452 |
| Google | Detected |
| Jiangmin | Trojan.Linux.dll |
| Kingsoft | Linux.Trojan.Agent.gen |
| Lionic | Trojan.Linux.LuckyMouse.4!c |
| McAfeeD | ti!C65C435737AC |
| MicroWorld-eScan | Trojan.Generic.38293452 |
| Microsoft | Trojan:Linux/SAgnt!MTB |
| SentinelOne | Static AI - Suspicious ELF |
| Skyhigh | Artemis!Trojan |
| Sophos | Linux/Agnt-BQ |
| Symantec | Backdoor.Trojan |
| Tencent | Malware.Linux.Generic.1c03fecd |
| TrendMicro | Trojan.Linux.SYSUPDATE.A |
| TrendMicro-HouseCall | Trojan.Linux.SYSUPDATE.A |
| VIPRE | Trojan.Generic.38293452 |
| Varist | E64/LuckyMouse.A |
| ZoneAlarm | Linux/Agnt-BQ |
| alibabacloud | Trojan:Linux/LuckyMouse.B |
| Ikarus | Trojan.Linux.Luckymouse |
| Rising | Trojan.LuckyMouse/Linux!8.172C2 (CLOUD) |
Process list
| Name | Command line |
|---|
| c65c435737acelf | |
| c65c435737acelf | |
| c65c435737acelf | |