MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4336351dad44438b1165f52112689b6927f6a5e00e4d7b439f590ce3fe555bf3. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Adware.Breitschopp


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: 4336351dad44438b1165f52112689b6927f6a5e00e4d7b439f590ce3fe555bf3
SHA3-384 hash: f1da39041a47d424d62a0608dca49f7b86a6654807dade8730029419d827904e8fa149868e3f4c5705953c9ce6195836
SHA1 hash: 5f41e785a7bd8fb075665110fab200e0ffbce7af
MD5 hash: 385b195263d2dd1fa60d2b53cf2886c9
humanhash: london-cola-violet-colorado
File name:4336351dad44438b1165f52112689b6927f6a5e00e4d7b439f590ce3fe555bf3
Download: download sample
Signature Adware.Breitschopp
File size:559'944 bytes
First seen:2020-11-07 20:03:55 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash c581e778ba559d8e6a1073ed4b145b6f (87 x Adware.Breitschopp)
ssdeep 12288:uO7tKIaMYfAqouVTJW4/8HvQ7mjbVcRTEMQlMkc9A7Z20q:uCFYrouVdW48emjbVcpEMQl9nlJq
Threatray 37 similar samples on MalwareBazaar
TLSH F8C48D2BB291E277D46308B25F9BA33704759736A52DD502B3542E1FEA703E0AB2435F
Reporter seifreed
Tags:Adware.Breitschopp

Intelligence


File Origin
# of uploads :
1
# of downloads :
86
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a file in the %temp% directory
Creating a file
Creating a window
DNS request
Connecting to a non-recommended domain
Sending an HTTP POST request
Sending an HTTP GET request
Moving a recently created file
Searching for the window
Changing a file
Gathering data
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Behaviour
Modifies Internet Explorer settings
Suspicious use of SetWindowsHookEx
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments