MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 02fb8eb6c513e90738234def1f0ee6869d25af749ba3285b9b979ed33c3ec2e9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 4
| SHA256 hash: | 02fb8eb6c513e90738234def1f0ee6869d25af749ba3285b9b979ed33c3ec2e9 |
|---|---|
| SHA3-384 hash: | 9904a914bb4843b7e1e117ade5313c7c06b293a47c4c4d550a09c68cdd5d26df78d4aee16f4ba051339455e7fd97f866 |
| SHA1 hash: | a8426282b54962517594fe09cbc9470422680978 |
| MD5 hash: | f4ec55f38745a5c1eac2c218fa6ab222 |
| humanhash: | wolfram-six-cola-item |
| File name: | Überweisen.xll |
| Download: | download sample |
| File size: | 1'104'407 bytes |
| First seen: | 2021-08-31 09:27:16 UTC |
| Last seen: | Never |
| File type: |  exe |
| MIME type: | application/x-dosexec |
| imphash | 946c7b5f0ac6d3a47863eb46459f9075 |
| ssdeep | 24576:fZRJHvkJX1acLgg7yqZmBl9y0/DUQIGId:ffJcBEgWqMM4UQm |
| TLSH | T19935E057F3D7F6B4E6BE827A86B1C92C52B6745602B0938F774075892D22392493CB0F |
| Reporter |  lowmal3 |
| Tags: | exe xll |
Intelligence
File Origin
# of uploads :
1
# of downloads :
112
Origin country :
n/a
Vendor Threat Intelligence
Malware family:
n/a
ID:
1
File name:
Überweisen.xll
Verdict:
No threats detected
Analysis date:
2021-08-31 09:29:37 UTC
Tags:
n/a
Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Result
Verdict:
Malware
Maliciousness:
Behaviour
Sending a UDP request
Launching a process
Creating a window
Creating a file
Verdict:
Unknown
Result
Threat name:
Unknown
Detection:
clean
Classification:
n/a
Score:
1 / 100
Behaviour
Behavior Graph:
n/a
Threat name:
ByteCode-MSIL.Trojan.Tnega
Status:
Malicious
First seen:
2021-08-31 09:28:11 UTC
AV detection:
19 of 28 (67.86%)
Threat level:
5/5
Verdict:
unknown
Result
Malware family:
n/a
Score:
1/10
Tags:
n/a
Behaviour
Suspicious use of AdjustPrivilegeToken
Unpacked files
SH256 hash:
02fb8eb6c513e90738234def1f0ee6869d25af749ba3285b9b979ed33c3ec2e9
MD5 hash:
f4ec55f38745a5c1eac2c218fa6ab222
SHA1 hash:
a8426282b54962517594fe09cbc9470422680978
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe 02fb8eb6c513e90738234def1f0ee6869d25af749ba3285b9b979ed33c3ec2e9
(this sample)
Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.