MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 40f2f1b52877c4859614a065d6d538c9c07e6dfe7b763d76c2919daeda7cbbeb. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Avaddon


Vendor detections: 8


Intelligence 8 IOCs YARA File information Comments

SHA256 hash: 40f2f1b52877c4859614a065d6d538c9c07e6dfe7b763d76c2919daeda7cbbeb
SHA3-384 hash: 51de8e4ca683d9365416d9e703d58028ec4f018155d64f88b7084a7b271d56dac270982f1e9ad1f1c1d6272257578866
SHA1 hash: 63f27e50dc86d1ed44da7e8ed675b6af8429951b
MD5 hash: 51813a011933af7ea36ddca33e2794e0
humanhash: uranus-quebec-johnny-music
File name:51813a011933af7ea36ddca33e2794e0.exe
Download: download sample
Signature Avaddon
File size:3'140'439 bytes
First seen:2020-09-25 13:15:19 UTC
Last seen:2020-09-25 13:48:39 UTC
File type:Executable exe
MIME type:application/x-dosexec
imphash b1ea5fd53e7480d5e00ebc689ced94b3 (6 x Avaddon)
ssdeep 49152:zH1VG8SMsvVVhOKy4zMFxSbbbbbpc+9AWeEi4Dgmr7VKm4R:bw3OKBzMFxybbbbpNGWeEi4DtrRKm4
TLSH CFE529F5B54AB1CBD49E12789527CE41A82D43F483214843BAACB9BE3FB2CD31756C25
Reporter abuse_ch
Tags:Avaddon exe

Intelligence


File Origin
# of uploads :
2
# of downloads :
231
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
Malware
Maliciousness:
Result
Threat name:
Unknown
Detection:
malicious
Classification:
n/a
Score:
52 / 100
Signature
Machine Learning detection for sample
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
Threat name:
Win32.Ransomware.Avaddon
Status:
Malicious
First seen:
2020-08-28 10:48:38 UTC
AV detection:
18 of 29 (62.07%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  10/10
Tags:
n/a
Unpacked files
SH256 hash:
40f2f1b52877c4859614a065d6d538c9c07e6dfe7b763d76c2919daeda7cbbeb
MD5 hash:
51813a011933af7ea36ddca33e2794e0
SHA1 hash:
63f27e50dc86d1ed44da7e8ed675b6af8429951b
Detections:
win_avaddon_w0
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Avaddon

Executable exe 40f2f1b52877c4859614a065d6d538c9c07e6dfe7b763d76c2919daeda7cbbeb

(this sample)

  
Delivery method
Distributed via web download

Comments