MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 486dcd8d1c728a03a0dfa21754835bb14ad6f35491b6818ac71d212f4e078856. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: 486dcd8d1c728a03a0dfa21754835bb14ad6f35491b6818ac71d212f4e078856
SHA3-384 hash: 8d4e202c8496c7b6b3ba390e8ca775c6e31f9d8da3390ed50422568697052d7fbfc147714b2cd5ebf35ad3abd661c1d5
SHA1 hash: 330512c28764182991c4ad1c2c982c5184634339
MD5 hash: b82628d1fd70b105f80935ea16e3bdf3
humanhash: mango-winter-blossom-fifteen
File name:SecuriteInfo.com.Mal.GandCrab-G.5509.31281
Download: download sample
File size:361'984 bytes
First seen:2020-06-18 11:00:51 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 6fb5d65eee48767215290babfd6c1b31 (1 x RaccoonStealer)
ssdeep 6144:lmxUlCIa0cmTbp5tKqdw3kzRBjn4NuFT7diSDen95dByfmOlaoyubS6BD:ZlCL2wEjnquFXyP4mOrlN
Threatray 32 similar samples on MalwareBazaar
TLSH 3C74DF6876A8C73DC5E342310CF7BAB58A7ABC655C30498726B4770E6DB03D16231BA7
Reporter SecuriteInfoCom

Intelligence


File Origin
# of uploads :
1
# of downloads :
84
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Ransomware.Stop
Status:
Malicious
First seen:
2020-06-18 11:36:02 UTC
AV detection:
25 of 29 (86.21%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  7/10
Tags:
spyware
Behaviour
Suspicious behavior: EnumeratesProcesses
Reads user/profile data of web browsers
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments