MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 133947fe94bf9236f7ca7cdab497fdec0c0a6ba81f85b249608eb80dde4ba30f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 133947fe94bf9236f7ca7cdab497fdec0c0a6ba81f85b249608eb80dde4ba30f
SHA3-384 hash: fb1a4b6c0e267bdc6d05b94106b92364d2c6664a232014ca158aba13b8bf3653ab25d6e27e6a52ec206e490fd2a0240a
SHA1 hash: 96e49a746659267f2d922385fb62d15ade23ca37
MD5 hash: 71a8fc9b372fa738b97109504a37a0f2
humanhash: burger-oven-one-illinois
File name:133947fe94bf9236f7ca7cdab497fdec0c0a6ba81f85b249608eb80dde4ba30f
Download: download sample
File size:1'263'157 bytes
First seen:2020-11-07 20:17:37 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash e4290fa6afc89d56616f34ebbd0b1f2c (50 x CoinMiner)
ssdeep 24576:JanwhSe11QSONCpGJCjETPluMe7bPMS8Ykgc66HVFZUEbRQf:knw9oUUEEDluxTMS8Tg4nZUCS
Threatray 107 similar samples on MalwareBazaar
TLSH 494533020F6AABFAC73D113C145E0E0185207BD9940CB774ABD265A39FFEBB96D6540E
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
81
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Win.Malware.Eati-7331386-0
Create hunting rule

Win.Malware.Eati-7331431-0
Create hunting rule

Win.Malware.Eati-7331499-0
Create hunting rule

Win.Trojan.Mansabo-9670631-0
Create hunting rule

Win.Trojan.Mansabo-9787656-0
Create hunting rule

Win.Trojan.Mansabo-9787658-0
Create hunting rule

Win.Trojan.Mansabo-9787665-0
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a file in the system32 directory
Creating a process from a recently created file
Sending a UDP request
Creating a window
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/133947fe94bf9236f7ca7cdab497fdec0c0a6ba81f85b249608eb80dde4ba30f/
Threat name:
Win64.Trojan.MinerXMRig
Create hunting rule
Status:
Malicious
First seen:
2020-11-07 20:38:38 UTC
AV detection:
24 of 29 (82.76%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
11574d2f1b8924807b8ce193ee0b8e868845066d965f471ecf6a00606c240966
1e91acd014a0dcf929f9beb50120526bcf3511c014afe065f9f6a3d79907e536
2fe27203f0016cc17a0c87321851747be25ec38cabf44328704ea514e369c6a7
a85e547f74ef5452bae6e79a5004c73a604e6d3febbe1c85fae1a65d39a97f2d
aed1ec82acd83e514cab79421231da4075fa9a31efe802436814dda0903590e5
beeef3cfbb7ab4c32e924c51fb53782fa6b1994c0456e22d3216318791006398
d7a87c09bf69a367a5aae509593a91bee82c4ae10c5e7e813ea4149039bd3860
d94a82070841d74b384afcae00cdb17e7fa21cacfe1e8143b1f2184715b5dfe9
e58d6d8db4e498b39ae453c8a046a27a6dcaa7be188948f1dc23ddcc9a7b6124
ff1293d1c92240651b89cb3cf102a636da2efe7fb963a8db297b5bf938088bcb
+ 97 additional samples on MalwareBazaar
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments