MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 16486755e20c9abda9b01c31fa8bdd80033f5c2c5320fa1611645942b4612987. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 5
| SHA256 hash: | 16486755e20c9abda9b01c31fa8bdd80033f5c2c5320fa1611645942b4612987 |
|---|---|
| SHA3-384 hash: | 7262433d3fcee986d075114122ff473f90f12a8b6226603e0c0a106b3e46bba42d3363823571fd32b1bc09ed28e998c7 |
| SHA1 hash: | c1f35e1910ab59c21684e600794fecbefba277a1 |
| MD5 hash: | 4e62febb0ac594a5f0e92021ae54850f |
| humanhash: | orange-blue-stairway-beryllium |
| File name: | SecuriteInfo.com.Trojan.GenericKD.36624462.9525.21698 |
| Download: | download sample |
| File size: | 77'824 bytes |
| First seen: | 2021-04-04 23:40:36 UTC |
| Last seen: | Never |
| File type: |  exe |
| MIME type: | application/x-dosexec |
| ssdeep | 768:7c9TdcNfhldBQCTsWA6zSdmQUjfcsiB7FPPVUn3VmiAJbcxOXyu+yTdxOGFqRD10:eK9hlICTbfWxUjfiBYgiSE4dUSrUY |
| TLSH | B773939D726072DFC86BC876DEA82C64EA60747B431FD243E45711AE9A0C99BCF150F2 |
| Reporter |  SecuriteInfoCom |
Intelligence
File Origin
# of uploads :
1
# of downloads :
156
Origin country :
n/a
Vendor Threat Intelligence
Malware family:
n/a
ID:
1
File name:
SecuriteInfo.com.Trojan.GenericKD.36624462.9525.21698
Verdict:
No threats detected
Analysis date:
2021-04-04 23:42:49 UTC
Tags:
n/a
Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Detection:
n/a
Result
Verdict:
Clean
Maliciousness:
Behaviour
Launching the default Windows debugger (dwwin.exe)
Sending a UDP request
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Verdict:
Malicious
Result
Threat name:
Unknown
Detection:
malicious
Classification:
n/a
Score:
48 / 100
Signature
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
Gathering data
Threat name:
ByteCode-MSIL.Packed.Generic
Status:
Suspicious
First seen:
2021-04-02 01:43:00 UTC
AV detection:
16 of 48 (33.33%)
Threat level:
1/5
Verdict:
unknown
Result
Malware family:
n/a
Score:
3/10
Tags:
n/a
Behaviour
Suspicious behavior: EnumeratesProcesses
Suspicious use of AdjustPrivilegeToken
Suspicious use of WriteProcessMemory
Program crash
Unpacked files
SH256 hash:
16486755e20c9abda9b01c31fa8bdd80033f5c2c5320fa1611645942b4612987
MD5 hash:
4e62febb0ac594a5f0e92021ae54850f
SHA1 hash:
c1f35e1910ab59c21684e600794fecbefba277a1
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Kryptik
Score:
1.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
exe 16486755e20c9abda9b01c31fa8bdd80033f5c2c5320fa1611645942b4612987
(this sample)
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.