MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 44a512f79e8e2c45caa0c97266f6fb270e314eaff9f7008e762b7861bc446167. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 44a512f79e8e2c45caa0c97266f6fb270e314eaff9f7008e762b7861bc446167
SHA3-384 hash: df8ad6523db3142b993106dd1f4147e56019c7c806900d2f3f0b46e8ea5e933340b7d616eca5475e13c52333e7ab4836
SHA1 hash: 8357a76e724c483b71596715e0ae1dda7f2cdcae
MD5 hash: 2b6359d2791580752c2aaa20c0ad57d0
humanhash: louisiana-nitrogen-hot-robert
File name:44a512f79e8e2c45caa0c97266f6fb270e314eaff9f7008e762b7861bc446167
Download: download sample
File size:6'656 bytes
First seen:2020-06-03 09:32:58 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash f34d5f2d4577ed6d9ceec516c1f5a744 (48'744 x AgentTesla, 19'609 x Formbook, 12'242 x SnakeKeylogger)
ssdeep 96:gxib7r+0QzVzoS+GCZwrllDCo796EsJH6VFzNt:NHr+0WzoSbC8ll++965Jc/
TLSH B6D1F700F7AC4A27C4EA0B318D7B530477B8E69A43B7C78EBC84425D6E52B508503BF1
Reporter raashidbhatt
Tags:exe

Intelligence

File Origin
# of uploads :
1
# of downloads :
58
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Batlauncher
Create hunting rule
Status:
Malicious
First seen:
2020-06-03 17:16:21 UTC
AV detection:
24 of 48 (50.00%)
Threat level:
  2/5
Verdict:
unknown
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Link:
https://tria.ge/reports/201109-tfzskdj7c2/
Behaviour
Suspicious use of WriteProcessMemory
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments