MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0c981b3376b642732447b54c0c30d95f3db43bf28eafb558a331be1e50844892. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Adware.Breitschopp


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: 0c981b3376b642732447b54c0c30d95f3db43bf28eafb558a331be1e50844892
SHA3-384 hash: ba666bbfc8fe5dbea234ee235e56ed58ff0627b0c2623a14d24760c969edfad5b927a664a01d0f41c5ff56135c07970e
SHA1 hash: c851c47307a376950e9a3c617a4461e34886ddd9
MD5 hash: 2587603f541622a778f8af0166f21c1d
humanhash: fourteen-cardinal-mirror-eighteen
File name:0c981b3376b642732447b54c0c30d95f3db43bf28eafb558a331be1e50844892
Download: download sample
Signature Adware.Breitschopp
File size:559'928 bytes
First seen:2020-11-07 20:02:24 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash c581e778ba559d8e6a1073ed4b145b6f (87 x Adware.Breitschopp)
ssdeep 12288:hgpDD89IMKtnYTHq3vX46caDQDmack04jvEa8lMkc9A7Z2X:hTIPYTHUvI6cFmack04bEa8l9nli
Threatray 37 similar samples on MalwareBazaar
TLSH A3C48D2BB291E277D46308B25F9BA33704759732A56DD502B3542E1FEA703E0AB2435F
Reporter seifreed
Tags:Adware.Breitschopp

Intelligence


File Origin
# of uploads :
1
# of downloads :
87
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a file in the %temp% directory
Creating a file
Creating a window
DNS request
Connecting to a non-recommended domain
Sending an HTTP POST request
Sending an HTTP GET request
Moving a recently created file
Searching for the window
Changing a file
Gathering data
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Behaviour
Modifies Internet Explorer settings
Suspicious use of SetWindowsHookEx
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments