MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1138fdf051dea9849d7f2c50309a93a861426920fb2a5ea3191b072c6a98dc8b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 1138fdf051dea9849d7f2c50309a93a861426920fb2a5ea3191b072c6a98dc8b
SHA3-384 hash: a0d86c8b1ea674554719c4a48529c65dc5bad975d6c915eb26cd19b16ebd7fbfd47679ace458f3f29607c386f23cb37c
SHA1 hash: 211916bd8d7aa8b8e3816c391f88fc9dd64756a1
MD5 hash: d66ed9347573e057820129048b86307a
humanhash: massachusetts-avocado-fish-mirror
File name:1138fdf051dea9849d7f2c50309a93a861426920fb2a5ea3191b072c6a98dc8b
Download: download sample
File size:288'768 bytes
First seen:2020-07-06 07:06:24 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 4efa09a62077620ac9cc0ac2b7fefbe7
ssdeep 6144:oBalu7RN8RCDZ3QILGH0EpAr0O85IxE1MzaytShcA3l:I38RyZ3QIM0EpAr0OAIG
Threatray 360 similar samples on MalwareBazaar
TLSH D354E0777E1B6DE5C29C98B12C57D884FF58ECDBC68824F1B9287F4A34354BB4282624
Reporter JAMESWT_WT

Intelligence

File Origin
# of uploads :
1
# of downloads :
60
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://www.capesandbox.com/analysis/21046/
Detection(s):
PUA.Win.Packer.Upx-48
Create hunting rule

PUA.Win.Packer.Upolyx-12
Create hunting rule

PUA.Win.Packer.Upx-6
Create hunting rule

PUA.Win.Packer.Upx-4
Create hunting rule

PUA.Win.Adware.Slugin-6803969-0
Create hunting rule

PUA.Win.Adware.Slugin-6840354-0
Create hunting rule

Win.Trojan.Mahato-1
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a window
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/1138fdf051dea9849d7f2c50309a93a861426920fb2a5ea3191b072c6a98dc8b/
Threat name:
Win32.Trojan.Lypserat
Create hunting rule
Status:
Malicious
First seen:
2013-02-07 19:35:00 UTC
File Type:
PE (Exe)
Extracted files:
33
AV detection:
31 of 31 (100.00%)
Threat level:
  5/5
Verdict:
malicious
Similar samples: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 350 additional samples on MalwareBazaar
Result
Malware family:
n/a
Score:
  8/10
Tags:
n/a
Link:
https://tria.ge/reports/200706-3jcr5q6wkj/
Behaviour
UPX packed file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Cape
Cape
https://www.capesandbox.com/analysis/21046/

Comments