MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 51a2bca86994713a82df7ef3c91aebee00f8d09641a90eb3828dfa2584d5e24e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	51a2bca86994713a82df7ef3c91aebee00f8d09641a90eb3828dfa2584d5e24e
SHA3-384 hash:	9d486c31a64ff7edf990e647e6055a48ebc6912a0851df5121f3dca747837c90c0e92fdf8fcdd48d5794e321b9b41938
SHA1 hash:	a29594bedf461b27fa864acc31fb88438d14787c
MD5 hash:	bd46584e6799b42704a00427463d5e52
humanhash:	fruit-apart-venus-crazy
File name:	bd46584e6799b42704a00427463d5e52.exe
Download:	download sample
File size:	1'019'520 bytes
First seen:	2023-04-28 05:27:24 UTC
Last seen:	Never
File type:	exe
MIME type:	application/x-dosexec
ssdeep	24576:gh9caYn81lpuV5Kq8VQH7iaakcRs15s7o2CV:gh9cmpuV5Kqr7i/kv1u7o2o
TLSH	T1DB2533CAE000E8B7E0624579A743250AFEAD7CC7E2C406417F588E9397C3D79AD84E6D
TrID	33.6% (.EXE) OS/2 Executable (generic) (2029/13) 33.1% (.EXE) Generic Win/DOS Executable (2002/3) 33.1% (.EXE) DOS Executable Generic (2000/1)
Reporter	abuse_ch
Tags:	exe

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

254

Origin country :

NL

Vendor Threat Intelligence

CAPE Sandbox

Detection:

n/a

Link:

https://www.capesandbox.com/analysis/385367/

ClamAV Detected

Detection(s):

SecuriteInfo.com.Gen.Variant.Application.Tedy.165719.11248.1031.UNOFFICIAL

Alert

Create hunting rule

Dr. Web vxCube Clean

Result

Verdict:

Clean

Maliciousness:

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

overlay packed

Link:

https://www.filescan.io/uploads/644b59663d47a64d306b3482/reports/122f5cc5-7609-4377-a1ea-d0dfa04de90e/overview

Hybrid Analysis Win/grayware_confidence_70%

Verdict:

Malicious

Labled as:

Win/grayware_confidence_70%

Link:

https://www.hybrid-analysis.com/sample/51a2bca86994713a82df7ef3c91aebee00f8d09641a90eb3828dfa2584d5e24e

Intezer Suspicious

Verdict:

Suspicious

Link:

https://analyze.intezer.com/analyses/4eca71c5-83ac-4673-a48f-77597092814f

Joe Sandbox unknown

Result

Threat name:

n/a

Detection:

unknown

Classification:

n/a

Score:

1 / 100

Link:

https://www.joesandbox.com/analysis/1222556

Behaviour

Behavior Graph:

Download SVG

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/51a2bca86994713a82df7ef3c91aebee00f8d09641a90eb3828dfa2584d5e24e/

ReversingLabs TitaniumCloud Win64.Malware.Tedy

Threat name:

Win64.Malware.Tedy

Alert

Create hunting rule

Status:

Malicious

First seen:

2023-04-27 17:56:17 UTC

File Type:

PE+ (Exe)

AV detection:

3 of 24 (12.50%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=kgrlzkdjsrytvaw7p3z4sgxl5yapruewiguq5m4crx5clbgv4jha._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  7/10

Tags:

upx

Link:

https://tria.ge/reports/230428-f51nlsea6z/

UnpacMe

Unpacked files

SH256 hash:

51a2bca86994713a82df7ef3c91aebee00f8d09641a90eb3828dfa2584d5e24e

MD5 hash:

bd46584e6799b42704a00427463d5e52

SHA1 hash:

a29594bedf461b27fa864acc31fb88438d14787c

Link:

https://www.unpac.me/results/8234547c-dcde-4259-9394-3691bc2c82c9/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.16

Link:

https://yomi.yoroi.company/submissions/51a2bca86994713a82df7ef3c91aebee00f8d09641a90eb3828dfa2584d5e24e

File information

---

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

exe 51a2bca86994713a82df7ef3c91aebee00f8d09641a90eb3828dfa2584d5e24e

(this sample)

  

URLhaus

https://urlhaus.abuse.ch/url/2385507/

  

Delivery method

Distributed via web download

Cape

https://www.capesandbox.com/analysis/385367/