MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 39ad9ae3780c2f6d41b1897e78f2b2b6d549365f5f024bc68d1fe794b940f9f1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 39ad9ae3780c2f6d41b1897e78f2b2b6d549365f5f024bc68d1fe794b940f9f1
SHA3-384 hash: 9049521fbdeed13cecb45dde1171fb0c5a2a3c3f040d4d9a1515c2587b983f1b913ea2833e924b1816a60969f9fb393d
SHA1 hash: dd415dc19fcd8234fef05be09933995434f7f7cd
MD5 hash: 80bd4a36495806b9afb9dfd2ae59350b
humanhash: tennessee-michigan-charlie-bacon
File name:39ad9ae3780c2f6d41b1897e78f2b2b6d549365f5f024bc68d1fe794b940f9f1
Download: download sample
File size:428'032 bytes
First seen:2021-01-28 19:23:10 UTC
Last seen:2021-01-28 20:57:57 UTC
File type:Executable exe
MIME type:application/x-dosexec
imphash 79f8353f5755f7cf387e82af56dd9b85
ssdeep 12288:FScaT0e1tQrxPWCcIhn5sCSO0EH6QPLDBcEtesI1x78:seez4xPFhLP0IPX6EYVO
Threatray 1 similar samples on MalwareBazaar
TLSH C9941299B2E0497CF68B8778D8E34A51E7B378464773920E2B5841EE7F533849939F20
Reporter JAMESWT_WT
Tags:ZINC ZINC attacks against security researchers

Intelligence

File Origin
# of uploads :
2
# of downloads :
162
Origin country :
n/a
Vendor Threat Intelligence
Malware family:
n/a
ID:
1
File name:
39ad9ae3780c2f6d41b1897e78f2b2b6d549365f5f024bc68d1fe794b940f9f1
Verdict:
No threats detected
Analysis date:
2021-01-28 19:28:49 UTC
Tags:
n/a
Link:
https://app.any.run/tasks/5c740934-5965-4a67-bbcc-1af402afb45f

Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Detection:
n/a
Link:
https://www.capesandbox.com/analysis/114289/
Detection(s):
SecuriteInfo.com.Trojan.GenericKD.45631954.25919.5861.UNOFFICIAL
Create hunting rule

Result
Verdict:
Clean
Maliciousness:

Behaviour
Sending a UDP request
Result
Threat name:
Unknown
Detection:
malicious
Classification:
n/a
Score:
48 / 100
Link:
https://www.joesandbox.com/analysis/593297
Signature
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
Download SVG
behaviorgraph top1 signatures2 2 Behavior Graph ID: 345688 Sample: xOvctyA5AT Startdate: 28/01/2021 Architecture: WINDOWS Score: 48 14 Multi AV Scanner detection for submitted file 2->14 6 loaddll64.exe 1 2->6         started        process3 process4 8 rundll32.exe 6->8         started        10 rundll32.exe 6->10         started        12 rundll32.exe 6->12         started       
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/39ad9ae3780c2f6d41b1897e78f2b2b6d549365f5f024bc68d1fe794b940f9f1/
Threat name:
Win64.Trojan.NukeSped
Create hunting rule
Status:
Malicious
First seen:
2021-01-27 03:11:00 UTC
File Type:
PE+ (Dll)
Extracted files:
1
AV detection:
25 of 46 (54.35%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
68e6b9d71c727545095ea6376940027b61734af5c710b2985a628131e47c6af7
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Link:
https://tria.ge/reports/210128-q3j993lm3x/
Unpacked files
SH256 hash:
39ad9ae3780c2f6d41b1897e78f2b2b6d549365f5f024bc68d1fe794b940f9f1
MD5 hash:
80bd4a36495806b9afb9dfd2ae59350b
SHA1 hash:
dd415dc19fcd8234fef05be09933995434f7f7cd
Link:
https://www.unpac.me/results/b5f4192f-48c0-4d66-8623-c9b609ec2112/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/39ad9ae3780c2f6d41b1897e78f2b2b6d549365f5f024bc68d1fe794b940f9f1

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Cape
Cape
https://www.capesandbox.com/analysis/114289/

Comments