e252a54e441ea88aafa694259386afd002153481af25a5b7b2df46d17ac53fcc

Classification: Malicious

e252a54e441ea88aafa694259386afd002153481af25a5b7b2df46d17ac53fcc is a malicious file sample. Linked to Sandworm Team, Earth Lusca activity.

Detection summary

  • 90 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: SANDWORM TEAM (G0034) EARTH LUSCA (G1006)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Electrum Maltiverse 2023-03-02 04:15:22 2023-03-03 14:34:15 malicious-activity G0034 Sandworm Team
Earth Lusca Maltiverse 2023-03-02 04:15:22 2023-03-03 14:34:12 malicious-activity G1006 Earth Lusca

Tags

apt

Sample information

SHA-256
e252a54e441ea88aafa694259386afd002153481af25a5b7b2df46d17ac53fcc
First indexed
2023-03-03 14:34:12
Last updated
2025-10-22 00:10:46

Antivirus detections

EngineDetection
LionicTrojan.Win32.Convagent.4!c
Elasticmalicious (high confidence)
DrWebTrojan.PWS.Steam.34053
MicroWorld-eScanTrojan.GenericKD.63599707
ALYacTrojan.Stealer.Titan
MalwarebytesSpyware.PasswordStealer
ZillyaTrojan.Strab.Win32.532
SangforInfostealer.Win32.Kryptik.Vodo
K7AntiVirusTrojan ( 0059ab321 )
AlibabaTrojan:Win32/Strab.3a3a724b
K7GWTrojan ( 0059ab321 )
BitDefenderThetaGen:NN.ZexaF.36276.SIW@aaYzi9d
CyrenW32/Kryptik.IAB.gen!Eldorado
SymantecTrojan.Gen.2
ESET-NOD32a variant of Win32/Kryptik.HRNB
APEXMalicious
Paloaltogeneric.ml
CynetMalicious (score: 100)
KasperskyHEUR:Trojan-Spy.Win32.Stealer.pef
BitDefenderTrojan.GenericKD.63599707
NANO-AntivirusTrojan.Win32.Strab.jtioqu
ViRobotTrojan.Win32.S.Agent.2823168.F
AvastWin32:PWSX-gen [Trj]
RisingBackdoor.Agent!8.C5D (TFE:5:Dzhd41WRM1S)
EmsisoftTrojan.GenericKD.63599707 (B)
F-SecureTrojan.TR/Crypt.Agent.gpirk
VIPRETrojan.GenericKD.63599707
TrendMicroTROJ_GEN.R06CC0DKG22
McAfee-GW-EditionBehavesLike.Win32.Generic.vc
FireEyeTrojan.GenericKD.63599707
SophosTroj/Steal-DCZ
WebrootW32.Trojan.FL
AviraTR/Crypt.Agent.gpirk
MAXmalware (ai score=100)
Antiy-AVLTrojan/Win32.Kryptik
KingsoftWin32.Troj.Strab.ku.(kcloud)
MicrosoftTrojan:Win32/Redline.GKT!MTB
GridinsoftRansom.Win32.Sabsik.sa
XcitiumMalware@#a6jjbzmklhno
ArcabitTrojan.Generic.D3CA745B
ZoneAlarmHEUR:Trojan-Spy.Win32.Stealer.pef
GDataWin32.Trojan.PSE.1WBKHY8
GoogleDetected
AhnLab-V3Infostealer/Win.Raccoon.R534410
McAfeeArtemis!E7F46144892F
VBA32BScope.Backdoor.Convagent
CylanceUnsafe
TrendMicro-HouseCallTROJ_GEN.R06CC0DKG22
TencentWin32.Trojan.Strab.Osmw
YandexTrojan.Kryptik!XIxHAaZzwKE
IkarusTrojan.Win32.Krypt
MaxSecureTrojan.Malware.300983.susgen
FortinetW32/Kryptik.HRNB!tr
AVGWin32:PWSX-gen [Trj]
PandaTrj/Chgt.AD
CrowdStrikewin/malicious_confidence_100% (W)
AVGWin32:Evo-gen [Trj]
ArcabitTrojan.Jaik.D26807
AvastWin32:Evo-gen [Trj]
AviraHEUR/AGEN.1369736
BitDefenderGen:Variant.Jaik.157703
BkavW32.AIDetectMalware
CAT-QuickHealTrojan.Ghanarava.1733742161d1b9a6
CTXexe.trojan.kryptik
CynetMalicious (score: 99)
DeepInstinctMALICIOUS
EmsisoftGen:Variant.Jaik.157703 (B)
F-SecureHeuristic.HEUR/AGEN.1369736
GDataWin32.Trojan.PSE.11JSS0A
GridinsoftRansom.Win32.Sabsik.oa!s1
JiangminTrojanSpy.Stealer.ajpc
KingsoftWin32.Trojan-Spy.Stealer.pef
LionicTrojan.Win32.Stealer.12!c
MalwarebytesGeneric.Malware.Gen.DDS
McAfeeDti!E252A54E441E
MicroWorld-eScanGen:Variant.Jaik.157703
MicrosoftTrojan:Win32/Redline!pz
SangforTrojan.Win32.Save.a
SentinelOneStatic AI - Suspicious PE
SkyhighBehavesLike.Win32.Trojan.vc
SymantecTrojan Horse
TencentMalware.Win32.Gencirc.13b30a51
TrellixENSArtemis!E7F46144892F
TrendMicroTROJ_GEN.R002C0DFR23
TrendMicro-HouseCallTrojan.Win32.VSX.PE04C9n
VIPREGen:Variant.Jaik.157703
VaristW32/Kryptik.IAB.gen!Eldorado
ZoneAlarmTroj/Steal-DCZ
alibabacloudTrojan[spy]:Win/Kryptik.HRNB
huorongTrojan/Injector.ayd