MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 2044cdcd11846168a1e19466ac80566284c7ce18585be9c5255e2c63f94ec5da. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 5
| SHA256 hash: | 2044cdcd11846168a1e19466ac80566284c7ce18585be9c5255e2c63f94ec5da |
|---|---|
| SHA3-384 hash: | 68c7d2d53ea81e67c982c41f614d9a2d308749098dcffbb4239a5c85b61a804b8b2154022391b403503cd8d31f7094e7 |
| SHA1 hash: | 1b0f47f9ed8926a810b120c9e1a9e4c4171000c1 |
| MD5 hash: | 25028774eb76ab874dfe86d63472db6e |
| humanhash: | wisconsin-oxygen-robert-nineteen |
| File name: | SecuriteInfo.com.Trojan.VbCrypt.250.18836.15390 |
| Download: | download sample |
| File size: | 10'462'701 bytes |
| First seen: | 2022-04-07 04:37:58 UTC |
| Last seen: | Never |
| File type: |  exe |
| MIME type: | application/x-dosexec |
| imphash | dfb06052e74b26a42b0e490bd1c07959 (1 x Nitol) |
| ssdeep | 196608:aWY96BxJZ3J9KarZbMzdurDXKsJqGf2wOl6hmYN6Zp6Vq2N6:tdJ9KarZydOEQOcmY8Zp6j6 |
| Threatray | 5 similar samples on MalwareBazaar |
| TLSH | T1D8B633CF67C8B141C8E9AD3277229CE0F761DE776B4BE36924437265B02B284065F5A3 |
| File icon (PE): |  |
| dhash icon | f8e2fa76decccccc |
| Reporter |  SecuriteInfoCom |
| Tags: | exe |
Intelligence
File Origin
# of uploads :
1
# of downloads :
307
Origin country :
n/a
Vendor Threat Intelligence
Malware family:
n/a
ID:
1
File name:
SecuriteInfo.com.Trojan.VbCrypt.250.18836.15390
Verdict:
No threats detected
Analysis date:
2022-04-07 04:42:15 UTC
Tags:
installer
Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Detection:
n/a
Result
Verdict:
Malware
Maliciousness:
Behaviour
Creating a file in the %temp% directory
Creating a file
Creating a window
Searching for the window
Sending a custom TCP request
Verdict:
Suspicious
Threat level:
5/10
Confidence:
100%
Tags:
control.exe overlay packed shell32.dll
Result
Verdict:
UNKNOWN
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Verdict:
Suspicious
Result
Threat name:
Unknown
Detection:
clean
Classification:
n/a
Score:
14 / 100
Signature
PE file has a writeable .text section
Behaviour
Behavior Graph:
n/a
Verdict:
malicious
Similar samples:
Result
Malware family:
n/a
Score:
7/10
Tags:
n/a
Behaviour
Enumerates physical storage devices
Loads dropped DLL
Unpacked files
SH256 hash:
53991e1ff06ca96878fe504feb404407f6fbdd4665ffe1855bf27b1c3bcad3db
MD5 hash:
2fbaa3e8bf1dea5453d65212f6796e77
SHA1 hash:
ef6ef20166e8f54d37f9ea257ed590aa4844248d
SH256 hash:
0a4d3857d4392f379f1726352ea4972c185334d3e7ccebba913a9fc0545c9f12
MD5 hash:
4854c41f28da08b719972666e6c3718f
SHA1 hash:
cce6b1aaffce1c984c3bb2e9055066c5f6eac62f
SH256 hash:
052e899e13e8f513cd74c5a941548ddc8b98f10ce72e15b4b64ee78d27294057
MD5 hash:
2f50c22c4edb0081d5faddafb78e1adf
SHA1 hash:
78f805e530a544439b6b994ea4ab154d6f556e34
SH256 hash:
041fdff0001f1aec0cbb99929d7c80f9957b0846bd6341e28c5b04ad9d8b3c8e
MD5 hash:
5cef9309768d85d57f26074495a54ff7
SHA1 hash:
73548561267afae7ab51fb77184e51f119ed835f
SH256 hash:
33ee199b343b403cc4f925bdb46c545034b076d3981e0a8cc1f0bb081d85cd91
MD5 hash:
e32c1dc7b749d851f7634f3050920fca
SHA1 hash:
6c320fa6825da57cf802eace437b228cdd2de582
SH256 hash:
f8fa5c829776c3a43ab8fc53787dbb1a290a48ad3ee7305a71839f48e06ba33f
MD5 hash:
fec0c5ba8b92457d6fae95ab5f26f718
SHA1 hash:
3dcb26f6545eb0e725faaea24d4b4c922b94e40f
SH256 hash:
183d1e963bc9d52d2af1c509528eb6e0e09b4ecd742ed8f7d448b2a21f62c23e
MD5 hash:
71f96a4bb424c61470faf751dcf233bb
SHA1 hash:
3802e9cab22320a366eaeabb8e86cad3ac126f24
SH256 hash:
313fc31a86a8b11cdf104e0c3111040b6e615f0b35c7df53fbddf49293cdc366
MD5 hash:
a2dbf1d885cdf137c2926f36d3c9ec1e
SHA1 hash:
3565b192a3f914ef826cc9b6a9e1d313f3448bb0
SH256 hash:
33346fb6301715595573cb3a2dec9dd1e634b18096f90d3baad9d45b8426b274
MD5 hash:
0dbfb6b62b040703d7e4c83d84788888
SHA1 hash:
3267cb4b1742162d41dc420661d5ad9bd50a22c9
SH256 hash:
1d729b1a368312f8e1cf21c4335586980960d01883fe1ec1dde36cf1e5a5bf58
MD5 hash:
424e4fb710d0746eeef607fc05739d27
SHA1 hash:
3021e464923586a5a27b4f66b4d8378fb92e23c3
SH256 hash:
591f773c7b0228545db325837c551948d45f30649ffb22eaf5e8d5b7957ed7cd
MD5 hash:
27fe6d1afa7a70eb24f835665892524a
SHA1 hash:
2ac113efb1b1abda81e6238d6ec21b14fac467b8
SH256 hash:
8be91aab40362bc7119e239d2ec6ee4329ad4907ae85a20228bb468ecfdc2372
MD5 hash:
5feef4f5d105e71d488a97b7d6bfcc7c
SHA1 hash:
24b397672d00bc7474e87da8295ac3a7f1b9fdb8
SH256 hash:
f7320ce88c738374bd26ff9c12de2ba578adbc6da16d552c8d2d28de4de1c07f
MD5 hash:
af0bc436ccfb2a731b7f6e2754d0631b
SHA1 hash:
237086daf846ce65bad27233f65686cd85c8c536
SH256 hash:
c2ae27669651fd5d3142e35d3317f46b7b3a9683b49f93ccf575628d55e8a6da
MD5 hash:
d970f6e5200a676ded18b2dfb39a3352
SHA1 hash:
1d48fb37758c09f3f2a083a2869143383b68daec
SH256 hash:
2044cdcd11846168a1e19466ac80566284c7ce18585be9c5255e2c63f94ec5da
MD5 hash:
25028774eb76ab874dfe86d63472db6e
SHA1 hash:
1b0f47f9ed8926a810b120c9e1a9e4c4171000c1
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.