MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 39bbc16028fd46bf4ddad49c21439504d3f6f42cccbd30945a2d2fdb4ce393a4. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	39bbc16028fd46bf4ddad49c21439504d3f6f42cccbd30945a2d2fdb4ce393a4
SHA3-384 hash:	0fd944dc0e782ec8950da280bf64b51e2e070e3d0833ebd1865f735a7ceae3e0b703d101d03e86dff1bfdaf93e7f58a0
SHA1 hash:	c7d6ede0f6ac9f060ae53bb1db40a4fbe96f9ceb
MD5 hash:	49a90ab3246d45667a5ebc754cce8b8b
humanhash:	avocado-connecticut-cola-bulldog
File name:	49a90ab3246d45667a5ebc754cce8b8b.py
Download:	download sample
File size:	8'321 bytes
First seen:	2024-09-09 09:52:57 UTC
Last seen:	2024-09-09 09:53:11 UTC
File type:
MIME type:	text/x-script.python
ssdeep	192:sE7pDxdxZSZdYdApwU9kYH6EZlrkLnc+u2jT8hnO:sE5xdnSZdYdApwU9kYHPZdF2jcO
TLSH	T1A90242C6C9D81990C3C7E16854928801C66A7C03470A6D34BF6C92ECAF498B4D6F7DFE
Magika	python
Reporter	smica83
Tags:	COVERTCATCH DangerousPassword JokerSpy py

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

87

Origin country :

HU

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Python.BackDoor.187.9830.3638.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

94.1%

Link:

https://cyber-fortress.com/docs/result/index.php?id=66e05d1c751db35a8b9f6aa3

Tags:

Python

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/66dec585ac80a0110f66d736/reports/43aed419-4e0a-4881-885b-1cd8b28520c0/overview

Hybrid Analysis Trojan.Python.JokerSpy

Verdict:

Malicious

Labled as:

Trojan.Python.JokerSpy

Link:

https://www.hybrid-analysis.com/sample/39bbc16028fd46bf4ddad49c21439504d3f6f42cccbd30945a2d2fdb4ce393a4

Nucleon Malprob Malware

Score:

99%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/39bbc16028fd46bf4ddad49c21439504d3f6f42cccbd30945a2d2fdb4ce393a4

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/39bbc16028fd46bf4ddad49c21439504d3f6f42cccbd30945a2d2fdb4ce393a4/

ReversingLabs TitaniumCloud Script-Python.Trojan.JokerSpy

Threat name:

Script-Python.Trojan.JokerSpy

Alert

Create hunting rule

Status:

Malicious

First seen:

2023-06-16 14:14:18 UTC

File Type:

Text (Python)

AV detection:

24 of 38 (63.16%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=hg54cybi7vdl6to22soccq4vatj7n5bmzs6tbfc2fux5wthdsosa._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/39bbc16028fd46bf4ddad49c21439504d3f6f42cccbd30945a2d2fdb4ce393a4