MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2ad0a86a8c78c4ff669d22f8991b97be2ff8b9f43f70bca8edba49e7d9ca8c4d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 2ad0a86a8c78c4ff669d22f8991b97be2ff8b9f43f70bca8edba49e7d9ca8c4d
SHA3-384 hash: e40f44f216b56b6cc7c39e761d126fcd3a24c97fdf325f34c86e354c4220be3b6f127f2d26b31fccfcc916b2d313ceb2
SHA1 hash: 14fbecc66342481d66bf3e4cbd0ad2c285a2516c
MD5 hash: 8124cbd4e785bc8cc5db5863ab5dc0c2
humanhash: winter-mike-september-comet
File name:8124cbd4e785bc8cc5db5863ab5dc0c2.exe
Download: download sample
File size:64'971 bytes
First seen:2023-06-29 07:18:21 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
ssdeep 768:/Bw/obWAWtbWERSsVodTEh83EJdGiOFV+15dNtfcC1CDjL/DjLDt7CsP2tOfPm/X:/wlAWt1LodTU88o+1JtfcOtOfjq
TLSH T13753B66806685FE3E7DE17F88006D50ADEF20CD3669EFBA98E64E4E55501B53E4010BF
TrID 35.7% (.EXE) Win32 Executable (generic) (4505/5/1)
16.3% (.ICL) Windows Icons Library (generic) (2059/9)
16.1% (.EXE) OS/2 Executable (generic) (2029/13)
15.8% (.EXE) Generic Win/DOS Executable (2002/3)
15.8% (.EXE) DOS Executable Generic (2000/1)
Reporter abuse_ch
Tags:exe

Intelligence

File Origin
# of uploads :
1
# of downloads :
286
Origin country :
NL NL
Vendor Threat Intelligence
Detection:
n/a
Link:
https://www.capesandbox.com/analysis/403698/
Detection(s):
SecuriteInfo.com.Trojan.Siggen21.325.32630.11903.UNOFFICIAL
Create hunting rule

Result
Verdict:
Malware
Maliciousness:
Verdict:
Unknown
Threat level:
  0/10
Confidence:
100%
Tags:
overlay
Link:
https://www.filescan.io/uploads/649d306992fd95d8112543be/reports/3f29d350-f395-45b4-8c7f-41c866e8d3aa/overview
Verdict:
Malicious
Labled as:
Win/grayware_confidence_60%
Link:
https://www.hybrid-analysis.com/sample/2ad0a86a8c78c4ff669d22f8991b97be2ff8b9f43f70bca8edba49e7d9ca8c4d
Result
Verdict:
UNKNOWN
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Verdict:
Suspicious
Link:
https://analyze.intezer.com/analyses/00ed74ad-8465-44fc-a009-331056937b10
Result
Threat name:
n/a
Detection:
malicious
Classification:
n/a
Score:
48 / 100
Link:
https://www.joesandbox.com/analysis/1263126
Signature
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
Download SVG
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/2ad0a86a8c78c4ff669d22f8991b97be2ff8b9f43f70bca8edba49e7d9ca8c4d/
Threat name:
ByteCode-MSIL.Trojan.Seraph
Create hunting rule
Status:
Malicious
First seen:
2023-06-29 00:27:27 UTC
File Type:
PE (Exe)
AV detection:
12 of 36 (33.33%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=flikq2umpdcp6zu5el4jsg4xxyx7ropuh5ylzkhnxje6pwokrrgq._file
Result
Malware family:
n/a
Score:
  3/10
Tags:
n/a
Link:
https://tria.ge/reports/230629-h5htxacc78/
Unpacked files
SH256 hash:
2ad0a86a8c78c4ff669d22f8991b97be2ff8b9f43f70bca8edba49e7d9ca8c4d
MD5 hash:
8124cbd4e785bc8cc5db5863ab5dc0c2
SHA1 hash:
14fbecc66342481d66bf3e4cbd0ad2c285a2516c
Link:
https://www.unpac.me/results/c0c3f907-3da8-4a7b-8dfc-c9e126f14f61/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Executable exe 2ad0a86a8c78c4ff669d22f8991b97be2ff8b9f43f70bca8edba49e7d9ca8c4d

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/2506772/
  
Delivery method
Distributed via web download
Cape
Cape
https://www.capesandbox.com/analysis/403698/

Comments