MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2057c0cf4617eab7c91b99975dfb1e259609c4fa512e9e08a311a9a2eb65a6cf. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 2057c0cf4617eab7c91b99975dfb1e259609c4fa512e9e08a311a9a2eb65a6cf
SHA3-384 hash: 86f90bd1b20bff23d9403362dcb7c969e5869f1c9c635b631cfabc386bf6dfebd3136d3ff5589749c0e0a3f244b4bcc1
SHA1 hash: 0cf64de7a635f5760c4684c18a6ad2983a2c0f73
MD5 hash: 3005f1308e4519477ac25d7bbf054899
humanhash: lactose-failed-fix-hot
File name:2057c0cf4617eab7c91b99975dfb1e259609c4fa512e9e08a311a9a2eb65a6cf
Download: download sample
File size:166'400 bytes
First seen:2020-06-09 16:26:27 UTC
Last seen:Never
File type:DLL dll
MIME type:application/x-dosexec
imphash f56b60ba203f4772b5f87e061b59670a
ssdeep 3072:jdouAxXKBsOmN7OslJyOmg/wMFOpYop4vdxZdXYGeJavqL:jd3kCsOM5/YY3d9z
Threatray 8 similar samples on MalwareBazaar
TLSH A1F36C11B181C033D66B16345ABB97B25B7DB8214BB9D5C77BC08ABA5F302D2EA34347
Reporter JAMESWT_WT

Intelligence

File Origin
# of uploads :
1
# of downloads :
71
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Win.Malware.Agent-7787903-0
Create hunting rule

Result
Threat name:
Unknown
Detection:
malicious
Classification:
evad
Score:
48 / 100
Link:
https://www.joesandbox.com/analysis/356522
Behaviour
Behavior Graph:
n/a
Gathering data
Threat name:
Win32.Backdoor.NukeSped
Create hunting rule
Status:
Malicious
First seen:
2020-05-12 13:55:33 UTC
File Type:
PE (Dll)
Extracted files:
1
AV detection:
24 of 29 (82.76%)
Threat level:
  5/5
Verdict:
suspicious
Similar samples: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Malware family:
n/a
Score:
  9/10
Tags:
n/a
Link:
https://tria.ge/reports/201109-7x6mddhpr6/
Behaviour
Suspicious behavior: EnumeratesProcesses
Suspicious use of AdjustPrivilegeToken
Suspicious use of WriteProcessMemory
Program crash
ServiceHost packer
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments