MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 54fada6c9bfdc946561633bf5e3788d1921b6635629c02b6ba9a91ad7c008b60. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 54fada6c9bfdc946561633bf5e3788d1921b6635629c02b6ba9a91ad7c008b60
SHA3-384 hash: d217fb66a182760881213f7a666c8ecd252b0c6f145e48878cf00dad555db211ace94446d32bb4919428d5e8f8855b78
SHA1 hash: f044d8a6a3d3d39184d4ff596745e3d74c281471
MD5 hash: 4795a99569a2284c9730b1930dc2cf9b
humanhash: washington-yankee-mockingbird-minnesota
File name:8b26639ed00500072ca3915522356248
Download: download sample
File size:1'576'960 bytes
First seen:2020-11-17 11:39:50 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 2f095340e94ca508e3b83fb009ebf4cc (18 x Renamer)
ssdeep 24576:AcCT67wHlWis4l+j13CF75hqHiL/pSNDN93Lsb6W8cU4gLQDA:tC4n8z/4Wsxsb6W8cU4e
Threatray 1'079 similar samples on MalwareBazaar
TLSH F475010BDDEF116BFC552B71D02548B310FBF9F60E464722B6E1E60E2A70FA165384A6
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
61
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Win.Packed.Ponystealer-6733035-0
Create hunting rule

Win.Trojan.VBGeneric-6989114-0
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a window
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/54fada6c9bfdc946561633bf5e3788d1921b6635629c02b6ba9a91ad7c008b60/
Threat name:
Win32.Trojan.DistTrack
Create hunting rule
Status:
Malicious
First seen:
2020-11-17 11:42:20 UTC
AV detection:
27 of 29 (93.10%)
Threat level:
  5/5
Verdict:
unknown
Similar samples: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 1'069 additional samples on MalwareBazaar
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Link:
https://tria.ge/reports/201117-ra6fdkdqca/
Behaviour
Suspicious use of SetWindowsHookEx
Unpacked files
SH256 hash:
54fada6c9bfdc946561633bf5e3788d1921b6635629c02b6ba9a91ad7c008b60
MD5 hash:
4795a99569a2284c9730b1930dc2cf9b
SHA1 hash:
f044d8a6a3d3d39184d4ff596745e3d74c281471
Link:
https://www.unpac.me/results/1a08451f-5a8d-423d-87ad-7d0128c4c4f0/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments