MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 09d1c6ac87c3b76dce71145f2c331acc01ff0972e74676b2674cd704e0afdd4c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments

SHA256 hash: 09d1c6ac87c3b76dce71145f2c331acc01ff0972e74676b2674cd704e0afdd4c
SHA3-384 hash: 2461384a601fa1451b1dae5a29b67bb2d63ad98da51bd9c62e6a2ee048dc9484333722fa7ab0841202de68ac2f592f14
SHA1 hash: 4fd644eb009a0e724b26fe5287275a0c69b2cf96
MD5 hash: 967bdd0cff311b4ba22547a8149d4556
humanhash: connecticut-eleven-timing-chicken
File name:967bdd0cff311b4ba22547a8149d4556.exe
Download: download sample
File size:610'816 bytes
First seen:2020-07-01 05:30:52 UTC
Last seen:2020-07-01 06:54:40 UTC
File type:Executable exe
MIME type:application/x-dosexec
imphash e3be37c9938e166dffce51a9bcff567f
ssdeep 12288:4oLeQkcDktm3Ov0XjC+Aigy2gTyfwPkHrQB5XlxRiq8b:xLeQkcD2mSoagufw0sB5zRiqS
TLSH 39D412123792E032D067A1329405F7745ABF78704619918B33981F7EAEF36B09F79E4A
Reporter abuse_ch
Tags:exe

Intelligence


File Origin
# of uploads :
2
# of downloads :
81
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
Win32.Trojan.DanaBot
Status:
Malicious
First seen:
2020-07-01 05:32:09 UTC
AV detection:
24 of 28 (85.71%)
Threat level:
  5/5
Verdict:
unknown
Result
Malware family:
n/a
Score:
  6/10
Tags:
n/a
Behaviour
Checks processor information in registry
Legitimate hosting services abused for malware hosting/C2
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Executable exe 09d1c6ac87c3b76dce71145f2c331acc01ff0972e74676b2674cd704e0afdd4c

(this sample)

  
Delivery method
Distributed via web download

Comments