MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d62ddb44e4baf975b4e843e679781a9ffdb631c978d86550d4ad78a94ef549f1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: d62ddb44e4baf975b4e843e679781a9ffdb631c978d86550d4ad78a94ef549f1
SHA3-384 hash: 376017a461b3e31ee5773e846f2a908a08efe5626d7765e1cacad4bb013b950d9eb81e7389faaf48101bdd4a6551d272
SHA1 hash: 6c149176814a494dbf4bc34f07e3e6776855cf7b
MD5 hash: 0427e46e1e294197cb5c8bb15ac57156
humanhash: queen-louisiana-chicken-papa
File name:b0adf39dd6b664838ab7304168b7c393
Download: download sample
File size:284'672 bytes
First seen:2020-11-17 15:42:23 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash dc25ee78e2ef4d36faa0badf1e7461c9 (118 x CobaltStrike, 5 x Cobalt Strike)
ssdeep 6144:0MZUaJI8tmRd7ym/QOSfDnJAxAOcfizsWTbbSk:0QUwI8Ud77/WfbGAOj9Tb+
TLSH 0354BF45EDCA90F9FB4BCDB0A576F4E2032E57AC08CA8531A46FDE1C8E75895C084E27
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
60
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
Malware
Maliciousness:

Behaviour
Sending a custom TCP request
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/d62ddb44e4baf975b4e843e679781a9ffdb631c978d86550d4ad78a94ef549f1/
Threat name:
Win32.Trojan.CobaltStrike
Create hunting rule
Status:
Malicious
First seen:
2020-11-17 15:48:02 UTC
AV detection:
24 of 28 (85.71%)
Threat level:
  5/5
Unpacked files
SH256 hash:
d62ddb44e4baf975b4e843e679781a9ffdb631c978d86550d4ad78a94ef549f1
MD5 hash:
0427e46e1e294197cb5c8bb15ac57156
SHA1 hash:
6c149176814a494dbf4bc34f07e3e6776855cf7b
Link:
https://www.unpac.me/results/2cfd7a99-1705-4119-b2dc-5986f4ac071d/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments