MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 565fe57cae6b107bd5ed05670343c2a2f8881d2a702592368df73a53ed7ce8e1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 565fe57cae6b107bd5ed05670343c2a2f8881d2a702592368df73a53ed7ce8e1
SHA3-384 hash: 5fcbe33db95e49764ad742c1e21d0f08857c356bc5b62bef7d96fcd151b925a06dc73586c4725cc7ddab1b4cff9dc1ce
SHA1 hash: f6d3cd288ed7f0d1384d161bdb24b4bc909e7f34
MD5 hash: 8fa0d7a53d973ca3d5ee0d93355bd99e
humanhash: emma-lion-queen-minnesota
File name:8fa0d7a53d973ca3d5ee0d93355bd99e
Download: download sample
File size:79'872 bytes
First seen:2020-11-17 11:57:36 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash f34d5f2d4577ed6d9ceec516c1f5a744 (48'793 x AgentTesla, 19'692 x Formbook, 12'274 x SnakeKeylogger)
ssdeep 1536:DVMWhHsUBPtFFYzC5Yzs37fvCfOCZbPtFFRCD///////TDc/////gtFFW:mWhHJBPxYoyGCGCJPxRCD///////TA/9
TLSH 5C73BE2237E8EF16C87977F150B5118047BB7A9EA461FB1D3CC920CE4A76BA54622F13
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
54
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
Malware
Maliciousness:

Behaviour
DNS request
Launching a process
Creating a window
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/565fe57cae6b107bd5ed05670343c2a2f8881d2a702592368df73a53ed7ce8e1/
Threat name:
ByteCode-MSIL.Trojan.FakeTool
Create hunting rule
Status:
Malicious
First seen:
2020-11-07 19:34:15 UTC
AV detection:
22 of 29 (75.86%)
Threat level:
  5/5
Verdict:
unknown
Result
Malware family:
n/a
Score:
  6/10
Tags:
discovery
Link:
https://tria.ge/reports/201117-agrr5ylcw2/
Behaviour
Suspicious use of WriteProcessMemory
Suspicious behavior: EnumeratesProcesses
Checks installed software on the system
Unpacked files
SH256 hash:
565fe57cae6b107bd5ed05670343c2a2f8881d2a702592368df73a53ed7ce8e1
MD5 hash:
8fa0d7a53d973ca3d5ee0d93355bd99e
SHA1 hash:
f6d3cd288ed7f0d1384d161bdb24b4bc909e7f34
Link:
https://www.unpac.me/results/2e746e75-eb4f-4d27-9be5-372919138b8b/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments