MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 48778230239d8f2d1cb50b9aa4c27ceed7cc49473af472b59320838813646c9d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 8


Intelligence 8 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 48778230239d8f2d1cb50b9aa4c27ceed7cc49473af472b59320838813646c9d
SHA3-384 hash: bde7345af2009651b48e0f815734692d4a25274dac5926165ca0d038fd1ba461f1792ce4c6671de72d4ff521d1e0e804
SHA1 hash: 2f69b941c5a5f5bf70180c3150cb70cd9af7d7c4
MD5 hash: b32cd752f591c166de93871092bbdfed
humanhash: monkey-social-burger-emma
File name:b32cd752f591c166de93871092bbdfed.exe
Download: download sample
File size:90'112 bytes
First seen:2023-07-25 18:28:08 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
ssdeep 1536:yaRrWkiA1MaoAVRyKuOaLQPiVI4Zx0QQV1gHfvLDuLFEQACPM3n:ya4kiEVGxLZQV63+LqQO3
TLSH T16C93BF21B921C0B3C492A574857583B16B3E9A3213B9CDC7AB241A745F717C2EB7B34E
TrID 37.3% (.EXE) Win64 Executable (generic) (10523/12/4)
17.8% (.EXE) Win16 NE executable (generic) (5038/12/1)
16.0% (.EXE) Win32 Executable (generic) (4505/5/1)
7.3% (.ICL) Windows Icons Library (generic) (2059/9)
7.2% (.EXE) OS/2 Executable (generic) (2029/13)
Reporter abuse_ch
Tags:exe

Intelligence

File Origin
# of uploads :
1
# of downloads :
275
Origin country :
NL NL
Vendor Threat Intelligence
Detection:
n/a
Link:
https://www.capesandbox.com/analysis/433059/
Detection(s):
SecuriteInfo.com.Trojan.GenericFCA.Agent.99498.17573.10542.UNOFFICIAL
Create hunting rule

Result
Verdict:
Malware
Maliciousness:
Gathering data
Verdict:
Malicious
Labled as:
Win/malicious_confidence_100%
Link:
https://www.hybrid-analysis.com/sample/48778230239d8f2d1cb50b9aa4c27ceed7cc49473af472b59320838813646c9d
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Verdict:
Suspicious
Link:
https://analyze.intezer.com/analyses/ae8fad12-c9cd-40f0-9712-7048db5969e4
Result
Threat name:
n/a
Detection:
malicious
Classification:
n/a
Score:
52 / 100
Link:
https://www.joesandbox.com/analysis/1279491
Signature
Machine Learning detection for sample
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
Download SVG
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/48778230239d8f2d1cb50b9aa4c27ceed7cc49473af472b59320838813646c9d/
Threat name:
Win32.Trojan.RedLine
Create hunting rule
Status:
Malicious
First seen:
2023-07-24 18:33:45 UTC
File Type:
PE (Exe)
AV detection:
16 of 37 (43.24%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=jb3yembdtwhs2hfvbonkjqt453l4yskhhl2hfnmtecbyqe3ensoq._file
Result
Malware family:
n/a
Score:
  3/10
Tags:
n/a
Link:
https://tria.ge/reports/230725-w4w7ssfe9v/
Unpacked files
SH256 hash:
48778230239d8f2d1cb50b9aa4c27ceed7cc49473af472b59320838813646c9d
MD5 hash:
b32cd752f591c166de93871092bbdfed
SHA1 hash:
2f69b941c5a5f5bf70180c3150cb70cd9af7d7c4
Link:
https://www.unpac.me/results/9af596ec-17dd-4a64-a768-a8c879b8f54c/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
0.70
Link:
https://yomi.yoroi.company/submissions/48778230239d8f2d1cb50b9aa4c27ceed7cc49473af472b59320838813646c9d

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Executable exe 48778230239d8f2d1cb50b9aa4c27ceed7cc49473af472b59320838813646c9d

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/2635570/
  
Delivery method
Distributed via web download
Cape
Cape
https://www.capesandbox.com/analysis/433059/

Comments