MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5b4314edaf2c1bc2e8edb57d84d9249ec97980bbf2d345859f66351d40995305. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

@Libranalysis

A detailed analysis can be found here: https://maxkersten.nl/binary-analysis-course/malware-analysis/azorult-loader-stages/

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

187

Origin country :

NL

Mail intelligence

No data

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

TwinWave.EvilDoc.DOCXRSTRGOOD.MSHTA.200401.UNOFFICIAL

Alert

Create hunting rule

Xls.Dropper.Agent-7601885-0

Alert

Create hunting rule

SecuriteInfo.com.JS.Obfus-2112.UNOFFICIAL

Alert

Create hunting rule

Win.Ransomware.Delf-6651871-0

Alert

Create hunting rule

Win.Malware.Delf-6957976-0

Alert

Create hunting rule

SecuriteInfo.com.Trojan.Inject3.38619.16980.13181.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.PowerShell.Dropper.16.10775.30406.UNOFFICIAL

Alert

Create hunting rule

Win.Trojan.Agent-7687596-1

Alert

Create hunting rule

CERT.PL MWDB

Gathering data

ReversingLabs TitaniumCloud Win32.Trojan.Hgbsmgy

Threat name:

Win32.Trojan.Hgbsmgy

Alert

Create hunting rule

Status:

Malicious

First seen:

2020-03-25 20:49:09 UTC

AV detection:

37 of 47 (78.72%)

Threat level:

  2/5