MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 04e3927f1ed659bd9084711faeb1073a660cafd92a2800e0faf69d0ecfe575bf. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


CoinMiner


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 04e3927f1ed659bd9084711faeb1073a660cafd92a2800e0faf69d0ecfe575bf
SHA3-384 hash: f3559307cdb43bd8b5930a61466f24b3ffbc88d020a994f8f5e694a1630adae22595cd0fe7b3070b386eb41726fe242b
SHA1 hash: c25569d648c1aef63447ca2f20fd28461e501205
MD5 hash: be873b658db961bf53b9915d8ee0c2bc
humanhash: chicken-hamper-zebra-magazine
File name:be873b658db961bf53b9915d8ee0c2bc.exe
Download: download sample
Signature CoinMiner
Create hunting rule
File size:2'953'489 bytes
First seen:2022-03-22 19:01:36 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 4e4095a0d90406c8428c5d9a9c6b05b7 (26 x CoinMiner, 4 x CoinMiner.XMRig)
ssdeep 49152:/kWABDN1bES9l4fGdDnox/OynBUB+dd39Vy7XqDwtRQGU3nTtiqQS/7TQyLCvZu:/kWAxbb9l4MnoxmyBo+dd39+xwgqQkZ9
TLSH T110D512BD5248335CC02EC9709533ED48B3FA562E12F4E5AAB1DBB6D077EB810E902B55
Reporter abuse_ch
Tags:CoinMiner exe

Intelligence

File Origin
# of uploads :
1
# of downloads :
177
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://www.capesandbox.com/analysis/255112/
Detection(s):
SecuriteInfo.com.Win32.Packed.VMProtect.ACR.22166.13198.UNOFFICIAL
Create hunting rule

Result
Verdict:
Clean
Maliciousness:
Verdict:
Suspicious
Threat level:
  5/10
Confidence:
100%
Tags:
overlay packed
Link:
https://www.filescan.io/uploads/623a1d700cd58dbd92d8c283/reports/41b40437-d49e-4390-bc6a-aaf975681a63/overview
Result
Verdict:
UNKNOWN
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Verdict:
Malicious
Link:
https://analyze.intezer.com/analyses/773667f4-f4d3-4447-bcd5-c009c0c35067
Result
Threat name:
Unknown
Detection:
malicious
Classification:
n/a
Score:
52 / 100
Link:
https://www.joesandbox.com/analysis/962047
Behaviour
Behavior Graph:
n/a
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/04e3927f1ed659bd9084711faeb1073a660cafd92a2800e0faf69d0ecfe575bf/
Threat name:
Win64.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2022-03-22 19:02:22 UTC
File Type:
PE+ (Exe)
AV detection:
7 of 27 (25.93%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Link:
https://tria.ge/reports/220322-xpsfqsdcgl/
Unpacked files
SH256 hash:
04e3927f1ed659bd9084711faeb1073a660cafd92a2800e0faf69d0ecfe575bf
MD5 hash:
be873b658db961bf53b9915d8ee0c2bc
SHA1 hash:
c25569d648c1aef63447ca2f20fd28461e501205
Link:
https://www.unpac.me/results/2819cf8c-0209-4171-ac8f-b9ef2b14d77a/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/04e3927f1ed659bd9084711faeb1073a660cafd92a2800e0faf69d0ecfe575bf

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

CoinMiner

Executable exe 04e3927f1ed659bd9084711faeb1073a660cafd92a2800e0faf69d0ecfe575bf

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/2109370/
  
Delivery method
Distributed via web download
Cape
Cape
https://www.capesandbox.com/analysis/255112/

Comments