MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 5b219e2aa3f03312247a68054f84377924a796d9350116b7879738b6f882f809. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 4
| SHA256 hash: | 5b219e2aa3f03312247a68054f84377924a796d9350116b7879738b6f882f809 |
|---|---|
| SHA3-384 hash: | 47dd0b5c8a53d859a27d964b3a31f6e9aebaf0bc7be45663e8f6261c501f8afd1a04eaa41256aad140e8474334961354 |
| SHA1 hash: | 6aa7385042d21913f7b4095b5b45d922580d31fa |
| MD5 hash: | 4df91d8ba79c61322cbbbf9655921920 |
| humanhash: | romeo-queen-happy-beryllium |
| File name: | a77524549141934738223a5d636835f8 |
| Download: | download sample |
| File size: | 212'992 bytes |
| First seen: | 2020-11-17 15:45:10 UTC |
| Last seen: | Never |
| File type: |  exe |
| MIME type: | application/x-dosexec |
| imphash | 03ae0108c7455c49c94d2d60afa1e57a (1 x Worm.Ramnit) |
| ssdeep | 3072:RhWzi7s/Jkug/mBHRasCyKY11vW20AL3E5NPp5+T2WM/+F4pLthEjQT6j:RhYSJ/mlMWKY11e+E5Bp5+aWLkEj1 |
| Threatray | 187 similar samples on MalwareBazaar |
| TLSH | F5248E02B1C0D89BD9B316700AF396949A7EFC31EB63811FB240772EEC36BA54A71755 |
| Reporter |  seifreed |
Intelligence
File Origin
# of uploads :
1
# of downloads :
58
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
Malware
Maliciousness:
Behaviour
Creating a window
Creating a file in the Windows subdirectories
Running batch commands
Creating a process with a hidden window
Creating a file in the Windows directory
Creating a process from a recently created file
Launching the default Windows debugger (dwwin.exe)
Sending a UDP request
Enabling autorun with the standard Software\Microsoft\Windows\CurrentVersion\Run registry branch
Enabling autorun by creating a file
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Threat name:
Win32.Trojan.Aenjaris
Status:
Malicious
First seen:
2020-11-17 15:54:37 UTC
AV detection:
27 of 29 (93.10%)
Threat level:
5/5
Verdict:
unknown
Similar samples:
+ 177 additional samples on MalwareBazaar
Unpacked files
SH256 hash:
5b219e2aa3f03312247a68054f84377924a796d9350116b7879738b6f882f809
MD5 hash:
4df91d8ba79c61322cbbbf9655921920
SHA1 hash:
6aa7385042d21913f7b4095b5b45d922580d31fa
SH256 hash:
5cd058bd7851bc6ec19cb0b90fcb16cb51389a38f25c279ff6b98b7e42f185c8
MD5 hash:
d97a4cfa777e4685fd2a322d96202fa2
SHA1 hash:
c637e8012cd0b9a6bde9948356c168959af1215b
SH256 hash:
bdecd0e8287e89b6a8cc2cd4ad60b73cf622ba842ad23ede7ab8c437654abfc9
MD5 hash:
af2dbb150eae7cc3eaeefba5d4334f22
SHA1 hash:
d13156911b7d9b248b725c53694d7146e2559851
SH256 hash:
96a11cfcf9c4902fa74cd61135ad798fbdbbf1d4bf67aaf3a1258cf489af3e9a
MD5 hash:
ac40f9435c5ef66e4619732e25d07d70
SHA1 hash:
347c92883b57242009d91f1593bc24ead5909946
SH256 hash:
6075bea6938101a950e2d4a1165be6780f2e197c5e641662214573a2fd3efd25
MD5 hash:
339e0a47b8f6a190dfa6bb4ef789e206
SHA1 hash:
2f626ca04202d3570c883c5ae899fd69a89544ac
SH256 hash:
c20474d41bf68b276de82b68db6027c3f43555489881f963502b9ef04be2ee8f
MD5 hash:
ad123ea063c2f5af5d040faaa92decc9
SHA1 hash:
cfbfb4944d3d7f1ca0d53287a0be183fef1f89c2
SH256 hash:
d22050c3ca0c074931fcb445a668851870409b41de9eaa9c4e24f2272882b2a6
MD5 hash:
38294474c1b19e9a025ec5a98167b84e
SHA1 hash:
5ffa1f9470f6f3fb3285b3914d9d63a15d6888d9
SH256 hash:
fdca753015955f8f6411fc26ba0b906bf8a6e60623f5705a87051f9b92a8ac50
MD5 hash:
940ada6b5dc1d13e17f44b5aba6a34c4
SHA1 hash:
d135b1e9d9b15d1d158df6f4731830fc55b70217
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Delivery method
Other
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.