MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6173e77438ab03089ea688eade0d801c4083a7c73e9cb1e7c4f57ae0c6034832. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	6173e77438ab03089ea688eade0d801c4083a7c73e9cb1e7c4f57ae0c6034832
SHA3-384 hash:	ee6c194eb299a79300fcee3aa4d6e8d1b125d73f130c636c2d3bfdd38c94e0b67fb5f17ba465e12d1ec45b98cb55584a
SHA1 hash:	2a0faf993f1a5cb3e664ee66c51d9077d9590775
MD5 hash:	936f83f913128e56d1fda0f70ff4afbf
humanhash:	bluebird-beryllium-grey-berlin
File name:	stilak32
Download:	download sample
Signature	Gozi Alert Create hunting rule
File size:	335'512 bytes
First seen:	2023-03-20 15:13:39 UTC
Last seen:	Never
File type:	unknown
MIME type:	application/octet-stream
ssdeep	6144:Ti0D5ij4o+B2b1dcYWnKzT03hzEJZsxbA7nszbIAHew8oAaHS2LIjScthkudwLS/:mjBMqc9nKPIcZstA7nk8w8oAa7syOwLo
TLSH	T15A6423CFFD024FE7CCADCC14DD166526531332A1A70DFD42E2669DE2755A69A3B032A0
Reporter	JAMESWT_WT
Tags:	agenziaentrate Gozi isfb MEF mise plugin Ursnif ursnif plugin

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

102

Origin country :

IT

Vendor Threat Intelligence

FileScan.IO No Threat

Verdict:

No Threat

Threat level:

  10/10

Confidence:

75%

Link:

https://www.filescan.io/uploads/6418783e06ce46e2c4375572/reports/88826ac7-2fe4-4096-a7d0-560966189dbb/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/6173e77438ab03089ea688eade0d801c4083a7c73e9cb1e7c4f57ae0c6034832

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/6173e77438ab03089ea688eade0d801c4083a7c73e9cb1e7c4f57ae0c6034832/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=mfz6o5byvmbqrhvgrdvn4dmadraihj6hh2oldz6e6v5obrqdjaza._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI ursnif3

Threat name:

ursnif3

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/6173e77438ab03089ea688eade0d801c4083a7c73e9cb1e7c4f57ae0c6034832