MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6952d61c1b90bbe292626eddde290f0649ff02beca59738bf0912f6e1491538e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments

SHA256 hash: 6952d61c1b90bbe292626eddde290f0649ff02beca59738bf0912f6e1491538e
SHA3-384 hash: 8299e03291f0c7968a52f6336da767a592edeb710f4a126da82d36b1e449f17ea7e5c184357b56a69927be046ae738ed
SHA1 hash: ec02a20f00474d32749797bd4d14a922279d98f1
MD5 hash: 4305257c8dadd2c25e1e2f91bec63330
humanhash: cat-rugby-idaho-leopard
File name:6952d61c1b90bbe292626eddde290f0649ff02beca59738bf0912f6e1491538e
Download: download sample
File size:559'616 bytes
First seen:2020-06-29 07:23:45 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash f34d5f2d4577ed6d9ceec516c1f5a744 (48'652 x AgentTesla, 19'463 x Formbook, 12'204 x SnakeKeylogger)
ssdeep 12288:dClbmx+X9Odxzs1DsOpkoRwQjlIG8b4+OGj:ubmiOX+sOmo9K/OGj
Threatray 119 similar samples on MalwareBazaar
TLSH 9BC4098BFEC06F6BC02A2533CCA25CBD82E9DB6E5701EB0FD1F46229167239C4646559
Reporter JAMESWT_WT

Intelligence


File Origin
# of uploads :
1
# of downloads :
64
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
ByteCode-MSIL.Trojan.Generic
Status:
Suspicious
First seen:
2020-06-29 00:31:17 UTC
File Type:
PE (.Net Exe)
Extracted files:
5
AV detection:
23 of 29 (79.31%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments