MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 089573b3a1167f387dcdad5e014a5132e998b2c89bff29bcf8b06dd497d4e63d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	089573b3a1167f387dcdad5e014a5132e998b2c89bff29bcf8b06dd497d4e63d
SHA3-384 hash:	5aea51053a88678eab85094e66a673ea1975fc8d417f0696e9f4d8f1e86b759a2e8e095e443ca6b78ee12795ddcb9a52
SHA1 hash:	dde44c91e9394b97a6d18f5b13031e2399853b03
MD5 hash:	fbcbfe33cc9d29566ce2c0a4021b54fb
humanhash:	pasta-johnny-wyoming-jersey
File name:	cl202966126.png
Download:	download sample
Signature	LambLoad Alert Create hunting rule
File size:	732'543 bytes
First seen:	2023-11-23 13:16:10 UTC
Last seen:	Never
File type:	unknown
MIME type:	image/png
ssdeep	12288:UkMZsIXIiddST/ripBEBL0QX0EQBYnkFA5AL2AG/mYLRf18SE3i5OnsfG2Q98vjP:UTZsIXIiddSTDipBEFbX0PQ5AL2AG9LP
TLSH	T102F412C41ACDD884C16F4A3C792D491DE36D4D3D62251EEE94E768AAAA33C507FBD803
Reporter	smica83
Tags:	DIAMOND SLEET LambLoad

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

94

Origin country :

HU

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Other.Malware-gen.29550.12468.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO No Threat

Verdict:

No Threat

Threat level:

  10/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/655f50d392fc3dea63982606/reports/35a8eb07-383d-4134-8711-d1b595fc54c9/overview

Hybrid Analysis NukeSped.MX trojan

Verdict:

Malicious

Labled as:

NukeSped.MX trojan

Link:

https://www.hybrid-analysis.com/sample/089573b3a1167f387dcdad5e014a5132e998b2c89bff29bcf8b06dd497d4e63d

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/089573b3a1167f387dcdad5e014a5132e998b2c89bff29bcf8b06dd497d4e63d/

ReversingLabs TitaniumCloud Win32.Trojan.LambLoad

Threat name:

Win32.Trojan.LambLoad

Alert

Create hunting rule

Status:

Malicious

First seen:

2023-11-22 17:35:52 UTC

File Type:

Image

AV detection:

9 of 23 (39.13%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=bckxhm5bcz7tq7onvvpacssrgluzrmwitp7stphywbw5jf6u4y6q._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.15

Link:

https://yomi.yoroi.company/submissions/089573b3a1167f387dcdad5e014a5132e998b2c89bff29bcf8b06dd497d4e63d