ce308b538ff3a0be0dbcee753db7e556a54b4aeddbddd0c03db7126b08911fe2
Classification: Malicious
ce308b538ff3a0be0dbcee753db7e556a54b4aeddbddd0c03db7126b08911fe2 is a trojan. Detected by 29 antivirus engines. Linked to Mustang Panda activity.
Detection summary
- 29 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Intrusion sets: MUSTANG PANDA (G0129)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Ta428 | Maltiverse | 2023-07-04 04:29:44 | 2023-07-05 20:50:43 | malicious-activity | |
| Generic.Malware | Maltiverse | 2023-07-05 11:14:06 | 2023-07-05 11:14:06 | G0129 Mustang Panda |
Tags
apt malwareSample information
- SHA-256
ce308b538ff3a0be0dbcee753db7e556a54b4aeddbddd0c03db7126b08911fe2- First indexed
- 2023-07-05 11:14:06
- Last updated
- 2026-09-03 02:24:05
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.Downloader.Script.gen |
| AVG | Other:Malware-gen [Trj] |
| AhnLab-V3 | Downloader/JS.Generic |
| Arcabit | Trojan.Generic.D404A61C |
| Avast | Other:Malware-gen [Trj] |
| BitDefender | Trojan.GenericKD.67413532 |
| CAT-QuickHeal | Script.Trojan.47898 |
| CTX | javascript.trojan.alien |
| ESET-NOD32 | JS/TrojanDownloader.Agent.ZTR trojan |
| Emsisoft | Trojan.GenericKD.67413532 (B) |
| GData | Trojan.GenericKD.67413532 |
| Detected | |
| Ikarus | Trojan-Downloader.JS.PlugX |
| Kaspersky | HEUR:Trojan.Script.Alien.gen |
| Lionic | Trojan.Script.Alien.4!c |
| MicroWorld-eScan | Trojan.GenericKD.67413532 |
| Microsoft | Trojan:Win32/Casdet!rfn |
| Rising | Downloader.Agent/JS!8.10EAD (TOPIS:E0:vy9osMJ5N5F) |
| Skyhigh | JS/Agent.hc |
| Sophos | JS/DwnLdr-ACIH |
| Symantec | JS.Downloader |
| Tencent | Js.Trojan-Downloader.Er.Ncnw |
| TrellixENS | JS/Agent.hc |
| TrendMicro | Trojan.JS.SMUGX.YEDGD |
| TrendMicro-HouseCall | Trojan.JS.SMUGX.YEDGD |
| VIPRE | Trojan.GenericKD.67413532 |
| ViRobot | JS.S.Agent.3722 |
| ZoneAlarm | JS/DwnLdr-ACIH |
| alibabacloud | Trojan[downloader]:Javascript/Casdet.Gen |