MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 8ac77ea1b7333cc26a60ce0857e878a7cd0b96025ee8e7764c9c04f38b073ee2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 3
| SHA256 hash: | 8ac77ea1b7333cc26a60ce0857e878a7cd0b96025ee8e7764c9c04f38b073ee2 |
|---|---|
| SHA3-384 hash: | d09c236340457245d017006ff163d7586470bfc9c1febcbb69b95ef01d3dc9e71272843d4cf15c10c8f8971603d4ddf9 |
| SHA1 hash: | ba970ec72a6b96c1eaa19b7c50e2de0de6394756 |
| MD5 hash: | 923fb4de03b2a9493af05a6465a9c139 |
| humanhash: | uranus-paris-lake-lemon |
| File name: | 8ac77ea1b7333cc26a60ce0857e878a7cd0b96025ee8e7764c9c04f38b073ee2 |
| Download: | download sample |
| File size: | 3'846'144 bytes |
| First seen: | 2020-03-23 18:44:22 UTC |
| Last seen: | 2020-03-30 07:07:04 UTC |
| File type: |  exe |
| MIME type: | application/x-dosexec |
| imphash | 2eabe9054cad5152567f0699947a2c5b (2'852 x LummaStealer, 1'312 x Stealc, 1'026 x Healer) |
| ssdeep | 98304:BoEVCh/1k/UCGz5s04Gd127NbpdUxxHkvHtaEYTwxDR7TMU9:2Qc1kNm5s0PdQ8HkvNaEYKd/7 |
| Threatray | 33 similar samples on MalwareBazaar |
| TLSH | 59062382185D9891C910CD39098CB2BE30775EFEF7FF150479F27D8624F69D1AA3AA21 |
| Reporter |  Marco_Ramilli |
| Tags: | exe |
Intelligence
File Origin
# of uploads :
2
# of downloads :
84
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Tiggre
Status:
Malicious
First seen:
2019-08-16 13:29:26 UTC
File Type:
PE (Exe)
Extracted files:
24
AV detection:
25 of 31 (80.65%)
Threat level:
2/5
Verdict:
malicious
Similar samples:
+ 23 additional samples on MalwareBazaar
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
exe 8ac77ea1b7333cc26a60ce0857e878a7cd0b96025ee8e7764c9c04f38b073ee2
(this sample)
Delivery method
Distributed via web download
BLint
The following table provides more information about this file using BLint. BLint is a Binary Linter to check the security properties, and capabilities in executables.
Findings
| ID | Title | Severity |
|---|---|---|
| CHECK_AUTHENTICODE | Missing Authenticode | high |
| CHECK_NX | Missing Non-Executable Memory Protection | critical |
| CHECK_PIE | Missing Position-Independent Executable (PIE) Protection | high |
| CHECK_TRUST_INFO | Requires Elevated Execution (level:requireAdministrator) | high |
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.