MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 62590723dffc946a4facb19c7da058a68ffd373041eff35a842f621c1835a1d6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	62590723dffc946a4facb19c7da058a68ffd373041eff35a842f621c1835a1d6
SHA3-384 hash:	8ce8b63c0b97af048b2d80dba71453ca0688b8e28c4ed8619cddd87f68feb6c50371fa26590094e5263c7e4ada37d5d8
SHA1 hash:	476e1d2901ec624239af141c0e111ad5299a9a99
MD5 hash:	d6cf963e84108179788211b6e9614d9b
humanhash:	seven-victor-king-mobile
File name:	crypdas
Download:	download sample
File size:	17'068 bytes
First seen:	2023-07-08 10:50:40 UTC
Last seen:	Never
File type:	unknown
MIME type:	text/plain
ssdeep	384:EJ9TMXhmfn5ECkBQXKtwSrwLTps67M5Wf/JlJ8GlqatuRvAucG:a9oXhmf5oBQXOhrwLp3JlSGlqagAY
TLSH	T1DE72FA769E53FDD06BFE3A50A8043D913C983A2BC774156CFFC9089728E5244DB2E998
Reporter	JAMESWT_WT
Tags:	91-213-50-74

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

63

Origin country :

IT

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Generic-EXE.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.PUA.Base64EXE-2.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

obfuscated zusy

Link:

https://www.filescan.io/uploads/64a93f9adbb9e835463f0b51/reports/85082bca-6cb8-433c-b216-af3c350a9d81/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/62590723dffc946a4facb19c7da058a68ffd373041eff35a842f621c1835a1d6

InQuest MALICIOUS

Result

Verdict:

MALICIOUS

Details

Base64 Encoded Powershell Directives

Detected one or more base64 encoded Powershell directives.

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/62590723dffc946a4facb19c7da058a68ffd373041eff35a842f621c1835a1d6/

ReversingLabs TitaniumCloud ByteCode-MSIL.Trojan.Zusy

Threat name:

ByteCode-MSIL.Trojan.Zusy

Alert

Create hunting rule

Status:

Malicious

First seen:

2023-06-14 15:11:26 UTC

File Type:

Text

AV detection:

5 of 38 (13.16%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=mjmqoi677skgut5mwgoh3icyu2h72nzqihx7gwuef5rbygbvuhla._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/62590723dffc946a4facb19c7da058a68ffd373041eff35a842f621c1835a1d6