MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0d6c960f81d696ab929de708e1042580e19c56f2807606a69b243fa8dd04408a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 0d6c960f81d696ab929de708e1042580e19c56f2807606a69b243fa8dd04408a
SHA3-384 hash: 183876f98e923a76bb9c2a37647fae5d9b512f2ad776e8f4140209f8ed5d6035e10dc43387334a92689c97895e506183
SHA1 hash: e36cff57ccad16a1479599862c74de250fc4aa8a
MD5 hash: b79bc97fda3025791ee3d6666b43e539
humanhash: montana-nuts-mobile-eight
File name:0d6c960f81d696ab929de708e1042580e19c56f2807606a69b243fa8dd04408a
Download: download sample
File size:3'535'872 bytes
First seen:2020-11-10 11:39:31 UTC
Last seen:2024-07-24 11:11:43 UTC
File type:Executable exe
MIME type:application/x-dosexec
imphash 46b6390fc667069edd4a8f9fbee7946a
ssdeep 98304:5sNw6saQqMOZ3oMoUTfTfuLcdNVTunPxjpJlH:5smjiBouzTIoVTupt
TLSH 83F53320618AC0B1C19712B55132CFF49CFBFA2655BBBE0E5F74147C27BAAE046A539C
Reporter seifreed

Intelligence

File Origin
# of uploads :
2
# of downloads :
62
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Win.Dropper.Generickdz-9789082-0
Create hunting rule

Win.Malware.Glupteba-9789016-1
Create hunting rule

Result
Verdict:
Clean
Maliciousness:

Behaviour
Launching the default Windows debugger (dwwin.exe)
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Result
Threat name:
Unknown
Detection:
malicious
Classification:
evad
Score:
52 / 100
Link:
https://www.joesandbox.com/analysis/528664
Signature
Detected unpacking (changes PE section rights)
Machine Learning detection for sample
Behaviour
Behavior Graph:
Download SVG
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/0d6c960f81d696ab929de708e1042580e19c56f2807606a69b243fa8dd04408a/
Threat name:
Win32.Trojan.MintTitirez
Create hunting rule
Status:
Malicious
First seen:
2020-11-11 00:08:58 UTC
AV detection:
26 of 29 (89.66%)
Threat level:
  5/5
Verdict:
unknown
Result
Malware family:
n/a
Score:
  10/10
Tags:
n/a
Link:
https://tria.ge/reports/201110-r779ngby5e/
Behaviour
Suspicious behavior: EnumeratesProcesses
Suspicious use of AdjustPrivilegeToken
Program crash
Suspicious use of NtCreateProcessExOtherParentProcess
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments