MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a6e9d6c145668c4fc6e6dbd3d1fe4bc394211d9c09d31c12730ceddf3e5056be. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



GoldenSpy


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments

SHA256 hash: a6e9d6c145668c4fc6e6dbd3d1fe4bc394211d9c09d31c12730ceddf3e5056be
SHA3-384 hash: c5ff1dec918d4c1a85eabce52cae632ab33210ec92120ab04fd7ce1c3b60c9cea43f7c96b0c857cabe46d449d8d6a096
SHA1 hash: ecd85fe374fe85ff8dc1316cf700cba715e8b89b
MD5 hash: 5002cc2fbcdd2f340e9258f74be8bd1d
humanhash: red-mobile-timing-snake
File name:GoldenSpy (11)
Download: download sample
Signature GoldenSpy
File size:375'789 bytes
First seen:2020-07-02 14:26:15 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash abb85e8b889dab3b36aa68b03047e6e6 (13 x GoldenSpy)
ssdeep 6144:3w8zbFY3OkY7XrCkdDdqqAP8bJFCQcc/TUv8p2sJMM1uzZnotq:zzbd1ykSV8bd/Tk8p2saMng
Threatray 60 similar samples on MalwareBazaar
TLSH B98423749B49C0F8DDD30AB0AEF9B726E9B71014819D67A6C31254F7BC23D811B2D3A9
Reporter JAMESWT_WT
Tags:GoldenSpy

Intelligence


File Origin
# of uploads :
1
# of downloads :
105
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
Win32.Backdoor.Goldenspy
Status:
Malicious
First seen:
2020-04-18 03:56:14 UTC
File Type:
PE (Exe)
Extracted files:
7
AV detection:
38 of 48 (79.17%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Behaviour
NSIS installer
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments