MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1da46e7b14e294362faa93eab9ee4dc1d388adef8422868654baa3d98353de6a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments

SHA256 hash: 1da46e7b14e294362faa93eab9ee4dc1d388adef8422868654baa3d98353de6a
SHA3-384 hash: 44d36b806eeedce71eebb7ccbbbc34871b6a97b778af9cc2785969e027094773d20bd62eb499b83fc1e65b2aade8852f
SHA1 hash: 4b87df447d35a38c759f74076efbe81ce3f0b26f
MD5 hash: 2dfd9eedc7972f3afc878a8a313925d7
humanhash: wisconsin-coffee-salami-virginia
File name:1da46e7b14e294362faa93eab9ee4dc1d388adef8422868654baa3d98353de6a
Download: download sample
File size:1'886'030 bytes
First seen:2020-06-03 09:04:08 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 5e25413dfcc5d6c2e1cb1ef199da4ab5
ssdeep 49152:HKCsZk0gkvGs9y0hnRQEsCW2s49wK9cRe5bpljqtR:KepW9y0lQ0wKxU7
Threatray 2 similar samples on MalwareBazaar
TLSH 67951255EAA192F2E41101B86A648FF71C6A7C788E50EEC373D2374D6C310C2AA73B57
Reporter raashidbhatt
Tags:exe

Intelligence


File Origin
# of uploads :
1
# of downloads :
58
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Salgorea
Status:
Malicious
First seen:
2020-06-03 17:44:06 UTC
AV detection:
43 of 48 (89.58%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  8/10
Tags:
n/a
Behaviour
Suspicious use of WriteProcessMemory
Deletes itself
Loads dropped DLL
Executes dropped EXE
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments