MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6d2c4017b8f44df58ac0c40581c211fcf975f6515e77bd67dc50f03243021a8a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 6d2c4017b8f44df58ac0c40581c211fcf975f6515e77bd67dc50f03243021a8a
SHA3-384 hash: 0ee7339d6cea42cf403831b200b1767d09fff6bf3a956cc1ae60f2e3c5a1db0b025c846e9f9468970929a9505f47610b
SHA1 hash: f8cb715951c719368ee9c1bdd39c8e3663652721
MD5 hash: 7704e340d8e937c2490243ffd3a65caf
humanhash: twelve-charlie-table-november
File name:fact0406202052114505.exe
Download: download sample
File size:5'759'328 bytes
First seen:2020-06-04 17:40:11 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash d2d509a743af6f4ae331bf4b1252665f
ssdeep 49152:o5ytTnP1s3xr9x8HptS/0G3QY/9knb9PuiZ1RxSyI2eWSFIT+Tj1jAp0IP9937uD:a81N16FijRNEFhtI193aD
Threatray 8 similar samples on MalwareBazaar
TLSH 7A467E52F144903AD89A3A365437A938583B7FF06921CE1B26F63F5C8F77581293BA07
Reporter luigy0x18

Intelligence

File Origin
# of uploads :
1
# of downloads :
85
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.Exe-6
Create hunting rule

PUA.Win.Adware.Browsefox-6628766-0
Create hunting rule

PUA.Win.Trojan.Generic-6629274-0
Create hunting rule

PUA.Win.Malware.Gamemodding-6726308-0
Create hunting rule

PUA.Win.Adware.Qjwmonkey-6892535-0
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Banload
Create hunting rule
Status:
Malicious
First seen:
2020-06-04 17:54:42 UTC
AV detection:
11 of 31 (35.48%)
Threat level:
  2/5
Verdict:
malicious
Similar samples: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Malware family:
n/a
Score:
  1/10
Tags:
n/a
Link:
https://tria.ge/reports/201109-wej5n3llax/
Behaviour
Suspicious behavior: EnumeratesProcesses
Suspicious use of SetWindowsHookEx
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Executable exe 6d2c4017b8f44df58ac0c40581c211fcf975f6515e77bd67dc50f03243021a8a

(this sample)

38374b3a5a88d3ee32e9f1b72541911ec2bb8080feecb5acc3acc12eea03bac8

anyrun
any.run
https://app.any.run/tasks/72fd418f-010d-43f4-a17d-1cb94eaa7f8d
  
Dropping
SHA256 38374b3a5a88d3ee32e9f1b72541911ec2bb8080feecb5acc3acc12eea03bac8
  
Delivery method
Distributed via e-mail link

Comments