MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 335269614dcf4e4a698af0619ad8bed937e378fd18e98d2228477b0bf421003d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: 335269614dcf4e4a698af0619ad8bed937e378fd18e98d2228477b0bf421003d
SHA3-384 hash: 6e71df23f4227682b54e01f9275a1c057e29de5a0ecf2192c0ee1fd5f079b5e0a175712b7d892de0a05bf89c7a242eeb
SHA1 hash: 4c1c06536ba70be6496a0e7feb8e33f0cc48892e
MD5 hash: 83e7e87c94ee1de3411682f05cd6e26a
humanhash: violet-grey-avocado-winter
File name:7c4e53181748292060b0ac8319b71ae8
Download: download sample
File size:2'359'583 bytes
First seen:2020-11-17 11:44:56 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash fcf1390e9ce472c7270447fc5c61a0c1 (863 x DCRat, 118 x NanoCore, 94 x njrat)
ssdeep 49152:EPGrsXQbD/A0ld5A3g00BYGocWvLHVQEodk5YtdqMjZ:EPGoXU7djBecWT1+rqa
Threatray 104 similar samples on MalwareBazaar
TLSH 9FB52301F88586B2D82646361B3D5B51AA387D704F35DF93B3E03998ED311E1B636AB3
Reporter seifreed

Intelligence


File Origin
# of uploads :
1
# of downloads :
63
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a window
Searching for the window
Result
Threat name:
Unknown
Detection:
clean
Classification:
n/a
Score:
8 / 100
Behaviour
Behavior Graph:
n/a
Threat name:
Win32.Backdoor.DarkComet
Status:
Malicious
First seen:
2020-11-17 11:46:07 UTC
AV detection:
19 of 28 (67.86%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Behaviour
Modifies Internet Explorer settings
Suspicious behavior: GetForegroundWindowSpam
Suspicious use of SetWindowsHookEx
Unpacked files
SH256 hash:
335269614dcf4e4a698af0619ad8bed937e378fd18e98d2228477b0bf421003d
MD5 hash:
83e7e87c94ee1de3411682f05cd6e26a
SHA1 hash:
4c1c06536ba70be6496a0e7feb8e33f0cc48892e
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments