MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4337ca05e3b34c4dd11e2b953ac4b4be983656ad1ba7d0986e09ead6738af970. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	4337ca05e3b34c4dd11e2b953ac4b4be983656ad1ba7d0986e09ead6738af970
SHA3-384 hash:	c696f9c086d2065e763d59124fb7bb6f08123d7f8f65482e751493c6c38868a15113ebcf3bcae490a7d32256a63c3b76
SHA1 hash:	3f21a538bada729854b84131c8851988c1ef7528
MD5 hash:	061b71868d903eed324f56c693af715a
humanhash:	vegan-maryland-october-comet
File name:	sk64
Download:	download sample
Signature	Gozi Alert Create hunting rule
File size:	470'172 bytes
First seen:	2023-03-29 09:28:05 UTC
Last seen:	2023-09-27 13:40:16 UTC
File type:	unknown
MIME type:	application/octet-stream
ssdeep	12288:4zoPDLDnC1KB2CsKCygQRh+oi8+353phr/h2bIq5pz:4gDf4S2CpgQHoJ3pZ/4sqLz
TLSH	T1FEA4234EE03D7748D90614F1EB13AD24A4FBA14A0F0D3A3F47679F4B4E5953CA2922B8
Reporter	JAMESWT_WT
Tags:	agenziaentrate Gozi isfb plugin Ursnif ursnif plugin

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

106

Origin country :

IT

Vendor Threat Intelligence

FileScan.IO No Threat

Verdict:

No Threat

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/642404de688c0e6397b36336/reports/f7dac878-14ae-4c9b-93b9-d865f2d5e208/overview

Hybrid Analysis Trojan.Generic

Verdict:

Malicious

Labled as:

Trojan.Generic

Link:

https://www.hybrid-analysis.com/sample/4337ca05e3b34c4dd11e2b953ac4b4be983656ad1ba7d0986e09ead6738af970

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/4337ca05e3b34c4dd11e2b953ac4b4be983656ad1ba7d0986e09ead6738af970/

ReversingLabs TitaniumCloud Binary.Trojan.Generic

Threat name:

Binary.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2023-01-11 17:18:45 UTC

File Type:

Binary

AV detection:

4 of 37 (10.81%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=im34ubpdwnge3ui6foktvrfux2mdmvvndot5bgdobhvnm44k7fya._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI ursnif3

Threat name:

ursnif3

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/4337ca05e3b34c4dd11e2b953ac4b4be983656ad1ba7d0986e09ead6738af970