MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 34cf91fe4a75262231b996f03d534a7e13af4b9a9257cda7daa96bf2478ae82f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Adware.Generic


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 34cf91fe4a75262231b996f03d534a7e13af4b9a9257cda7daa96bf2478ae82f
SHA3-384 hash: 23a8e6eb3d04d5ad1567228c61274db1126114ca105834b21941030c9d0e36288d8e0f6f6a282c14bcbf8f646981be60
SHA1 hash: 088665bdb9fc619d47813f7b2db5f9a6f778b3f6
MD5 hash: df5986f90d9c345fff7d9a0b25d8d4f6
humanhash: pip-purple-seven-timing
File name:34cf91fe4a75262231b996f03d534a7e13af4b9a9257cda7daa96bf2478ae82f
Download: download sample
Signature Adware.Generic
Create hunting rule
File size:463'381 bytes
First seen:2020-11-12 14:09:01 UTC
Last seen:2024-07-24 12:57:09 UTC
File type:Executable exe
MIME type:application/x-dosexec
imphash 29b61e5a552b3a9bc00953de1c93be41 (174 x Formbook, 82 x AgentTesla, 81 x Loki)
ssdeep 12288:Ve+iZK3bYaKwO1vewTx+rwdMe0oGo5w6nZRK+SwLrN+:Vf4KEa1gpTMrwdMeRnZwi8
Threatray 2 similar samples on MalwareBazaar
TLSH DDA412332292D0D7EE990A32DD2E82FAF178ACDDC05526F367507F7EB479A5B9509002
Reporter seifreed
Tags:Adware.Generic

Intelligence

File Origin
# of uploads :
2
# of downloads :
73
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Downloader.Soft32downloader-6691270-0
Create hunting rule

Result
Verdict:
Malware
Maliciousness:
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/34cf91fe4a75262231b996f03d534a7e13af4b9a9257cda7daa96bf2478ae82f/
Threat name:
Win32.Trojan.Zusy
Create hunting rule
Status:
Malicious
First seen:
2020-11-12 14:11:37 UTC
AV detection:
21 of 29 (72.41%)
Threat level:
  5/5
Verdict:
unknown
Similar samples:
89db7e29e8c49afe9d3de22532cb314623c9698e1dccc9d9a7cfe7adb79bd78c
Adware.Generic
d78fd3b8cb9c914dee5e60da793e2860f7fcf0393be067876bd3a00daf37a8e2
Adware.Generic
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Link:
https://tria.ge/reports/201112-qke77nkdp6/
Unpacked files
SH256 hash:
34cf91fe4a75262231b996f03d534a7e13af4b9a9257cda7daa96bf2478ae82f
MD5 hash:
df5986f90d9c345fff7d9a0b25d8d4f6
SHA1 hash:
088665bdb9fc619d47813f7b2db5f9a6f778b3f6
Link:
https://www.unpac.me/results/c9e03140-e834-46ff-b60b-646b21cbdfc6/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments