MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5120d960bbfbe6cd151baa2c1e35f4b0771c1b432762bcedd4eed2e83673f2e4. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: 5120d960bbfbe6cd151baa2c1e35f4b0771c1b432762bcedd4eed2e83673f2e4
SHA3-384 hash: 4be658e7cd28faaa312c411658ce24f37a20642eb7772214054ec7dc931f13b312e533adcc7f41045957fa9102d30ca5
SHA1 hash: 272b99034f00ec5961efab5afb4b1809ea1faccc
MD5 hash: ccb3df4052a0c2f181da2a2e52242b77
humanhash: oklahoma-uniform-coffee-georgia
File name:SecuriteInfo.com.Variant.Jacard.187955.24216.30910
Download: download sample
File size:3'881'472 bytes
First seen:2020-06-19 08:34:56 UTC
Last seen:Never
File type:DLL dll
MIME type:application/x-dosexec
imphash 6435e34ab9c2fd2323e2a3f2e84dc240
ssdeep 49152:NJPOnRjkN/jESuYd1fjOXoxPj8JrkHoTTyDdDyP:NJ0VkAGOyPjA4GyD
Threatray 13 similar samples on MalwareBazaar
TLSH F2067D23B284A53FD16B1A3B4837E6509C3F77617A12CC0F5BF4499C8F365816A7A60B
Reporter SecuriteInfoCom

Intelligence


File Origin
# of uploads :
1
# of downloads :
71
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Delf
Status:
Malicious
First seen:
2020-06-19 08:35:52 UTC
AV detection:
22 of 29 (75.86%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  9/10
Tags:
n/a
Behaviour
Suspicious behavior: EnumeratesProcesses
Suspicious use of AdjustPrivilegeToken
Suspicious use of WriteProcessMemory
Program crash
ServiceHost packer
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments