MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 471a0e2f7a88d32c60810cef11d4668aca3961de8c7080291e1d8d7b02d69a2b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 471a0e2f7a88d32c60810cef11d4668aca3961de8c7080291e1d8d7b02d69a2b
SHA3-384 hash: 9f6ebb330af1666ebeca6ccb5a3e058e4b0804bcd2411aad4d85a10d063117a4a90a5d0c624b58e74601d1574646e802
SHA1 hash: 926498ab525abde0ca5e2f21b7501a5e23c75077
MD5 hash: 6cb8d5ffc235ae0d7fc15c836af6e8d8
humanhash: kilo-comet-bluebird-mockingbird
File name:6cb8d5ffc235ae0d7fc15c836af6e8d8
Download: download sample
File size:356'352 bytes
First seen:2020-11-17 11:33:19 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash f34d5f2d4577ed6d9ceec516c1f5a744 (48'652 x AgentTesla, 19'463 x Formbook, 12'205 x SnakeKeylogger)
ssdeep 6144:HahtfULTOzbRW3er7w2bhafQEPx96w3KK6cDwSL0JV:Him3olWuvjd1Ev1L0
TLSH AE74CF5B37723848EAA0E0BD193DAA692E29D233744FFB7A056C96FC58C41D457E1323
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
55
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
Clean
Maliciousness:

Behaviour
Creating a file in the %temp% subdirectories
Creating a window
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/471a0e2f7a88d32c60810cef11d4668aca3961de8c7080291e1d8d7b02d69a2b/
Threat name:
ByteCode-MSIL.Trojan.Ymacco
Create hunting rule
Status:
Malicious
First seen:
2020-11-03 03:50:48 UTC
AV detection:
20 of 28 (71.43%)
Threat level:
  5/5
Verdict:
unknown
Result
Malware family:
n/a
Score:
  7/10
Tags:
agilenet
Link:
https://tria.ge/reports/201117-jmj1xbeczx/
Behaviour
Loads dropped DLL
Unpacked files
SH256 hash:
471a0e2f7a88d32c60810cef11d4668aca3961de8c7080291e1d8d7b02d69a2b
MD5 hash:
6cb8d5ffc235ae0d7fc15c836af6e8d8
SHA1 hash:
926498ab525abde0ca5e2f21b7501a5e23c75077
Link:
https://www.unpac.me/results/845ae2fc-4952-4075-a7d2-e48b0a58ae4a/
SH256 hash:
77dc05a6bda90757f66552ee3f469b09f1e00732b4edca0f542872fb591ed9db
MD5 hash:
9af5eb006bb0bab7f226272d82c896c7
SHA1 hash:
c2a5bb42a5f08f4dc821be374b700652262308f0
Link:
https://www.unpac.me/results/845ae2fc-4952-4075-a7d2-e48b0a58ae4a/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments