🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5ca4a9f6553fea64ad2c724bf71d0fac2b372f9e7ce2200814c98aac647172fb. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: 5ca4a9f6553fea64ad2c724bf71d0fac2b372f9e7ce2200814c98aac647172fb
SHA3-384 hash: 110501830a62b495d6d9d62db01a7be53f758e7cc4bb2f7ed47a4a82c293faf3681f6143ffbb7b79f78eed4bd9fb5093
SHA1 hash: e45f89c923d0361ce8f9c64a63031860a76b2d10
MD5 hash: 3a9cdd8a5cbc3ab10ad64c4bb641b41f
humanhash: fifteen-washington-bulldog-island
File name:Russian APT29 (9)
Download: download sample
File size:6'900'178 bytes
First seen:2020-07-17 05:13:24 UTC
Last seen:2020-07-17 06:02:27 UTC
File type: elf
MIME type:application/x-executable
ssdeep 49152:hPyt5H89G+YrbjVWMiUMNqb054dzNIdEp+rt1D5TvLlcpigaB5IDPmoFjPnMBbs0:hqHaQKNzVLlhLopfMlsnh8K54
TLSH DE663963F996449BD7BEE230C9A26622BB727065437177D37F90462A1D19BAC7E3C300
telfhash b5d372858cb027565fc803a2ccf48ac8a3aae00d115677e57fb8e17ad4dc5ce7ab1716
Reporter JAMESWT_WT
Tags:APT29

Intelligence


File Origin
# of uploads :
2
# of downloads :
194
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
Linux.Trojan.WellMess
Status:
Malicious
First seen:
2020-04-27 15:54:27 UTC
File Type:
ELF64 Little (Exe)
AV detection:
31 of 48 (64.58%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments