MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 38189e64fbba24355aa564b8acb3a11edf0eaff77c74b4a5acfe845286a9bef2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: 38189e64fbba24355aa564b8acb3a11edf0eaff77c74b4a5acfe845286a9bef2
SHA3-384 hash: 23becd333ee1922dcfe6094d007c0010bddaeec8f761997f44fa8a0b2efb93e93a8f09c1dab95b51ad22f03dfd48bb80
SHA1 hash: ea7edbe6b042d83b0a2c7486db58c5217c186e41
MD5 hash: 9df5372098bd9568602c4cfd7ea629ba
humanhash: mike-march-mockingbird-uniform
File name:38189e64fbba24355aa564b8acb3a11edf0eaff77c74b4a5acfe845286a9bef2
Download: download sample
File size:11'264 bytes
First seen:2020-07-09 13:46:09 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash f34d5f2d4577ed6d9ceec516c1f5a744 (48'663 x AgentTesla, 19'478 x Formbook, 12'208 x SnakeKeylogger)
ssdeep 192:2vLVZiWHq62jP0Mx8pBxvS2uiMGO0SJ84138fna9:2vLVZiWHq6RMxu/66MGODW4+fna
Threatray 24 similar samples on MalwareBazaar
TLSH B93218A6B7D48339C63E1F3309B616A007B2F7059D3BDB6E1D84144F8EA77408A427A3
Reporter JAMESWT_WT
Tags:Evilnum

Intelligence


File Origin
# of uploads :
1
# of downloads :
95
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
Clean
Maliciousness:

Behaviour
Creating a window
Threat name:
ByteCode-MSIL.Hacktool.Mousewe
Status:
Malicious
First seen:
2020-06-27 22:41:40 UTC
File Type:
PE (.Net Exe)
Extracted files:
3
AV detection:
19 of 48 (39.58%)
Threat level:
  1/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments