MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 bd668ef292ae01d2ed9a32b1ea054e2acb484f61e86481f306669637ba31ce82. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: bd668ef292ae01d2ed9a32b1ea054e2acb484f61e86481f306669637ba31ce82
SHA3-384 hash: 510c7adfc33a8f857f7d106b9dd1fb31acb7af80f034bd0c5b9c0ea9f1d48b32f404ac1ba8abffcf8eef8c4ba2dbb6ec
SHA1 hash: fcc3771f6e8b930e73222963321ab74f569feb8a
MD5 hash: 33c7888bb90ce95f2dad9453144e29c2
humanhash: fix-magazine-georgia-apart
File name:22.exe
Download: download sample
File size:966'656 bytes
First seen:2020-06-26 09:30:04 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash ac5b0d17bb1751d05270a75ffbc3b09c
ssdeep 12288:Ywo1VhAV+l6FpoUe/Hhm+/XXREi/eDGYBs2loHP806MkSJz:Ywo1VhAG6FCUe/hP/XXui2DMsoH8MXJz
Threatray 77 similar samples on MalwareBazaar
TLSH 9325AE43B2C284F2E709147105FA773ADA79DA861F15CBCB9394DD6D2C32690BD3329A
Reporter James_inthe_box
Tags:exe

Intelligence


File Origin
# of uploads :
1
# of downloads :
83
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
Clean
Maliciousness:
Threat name:
Win32.PUA.FlyStudio
Status:
Malicious
First seen:
2020-06-26 07:15:45 UTC
File Type:
PE (Exe)
Extracted files:
51
AV detection:
20 of 31 (64.52%)
Threat level:
  1/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Behaviour
Suspicious use of SetWindowsHookEx
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments