MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 64504291d0c7a200389df304fa4b88452110ead9cab7de1713393399be8b70d9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 7
| SHA256 hash: | 64504291d0c7a200389df304fa4b88452110ead9cab7de1713393399be8b70d9 |
|---|---|
| SHA3-384 hash: | bc110e2fb5ba2edf037d97a006ce7ef0b04f0ba83435e09926c1b9d32c8228ba0aac4f61a98d7dfde4cd4e6f7420c2b8 |
| SHA1 hash: | be809a8fa1804c62bfd91ce3ec67328981dd211f |
| MD5 hash: | 4f4126b538d7862b2bc1c7c1513d2a18 |
| humanhash: | gee-cup-queen-burger |
| File name: | 4f4126b538d7862b2bc1c7c1513d2a18 |
| Download: | download sample |
| File size: | 8'704 bytes |
| First seen: | 2021-09-08 07:42:02 UTC |
| Last seen: | Never |
| File type: |  exe |
| MIME type: | application/x-dosexec |
| imphash | 5aac9416dafd435c25e06c0aaa4273a3 (3 x Formbook) |
| ssdeep | 192:KH0JH08lYH0yH08lg07H08lVQWF9I5oWUD:KCvYNvXv1K2 |
| Threatray | 777 similar samples on MalwareBazaar |
| TLSH | T10802D54A784603D7EAC50EB46D234347227E179D12AC23720BE73CF9EDBC2179306A15 |
| Reporter |  zbetcheckin |
| Tags: | 32 exe |
Intelligence
File Origin
# of uploads :
1
# of downloads :
92
Origin country :
n/a
Vendor Threat Intelligence
Malware family:
n/a
ID:
1
File name:
4f4126b538d7862b2bc1c7c1513d2a18
Verdict:
Suspicious activity
Analysis date:
2021-09-08 07:42:44 UTC
Tags:
n/a
Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Detection:
n/a
Result
Verdict:
Malware
Maliciousness:
Behaviour
Creating a window
DNS request
Connection attempt
Sending a UDP request
Sending a custom TCP request
Sending an HTTP GET request
Verdict:
Malicious
Result
Threat name:
Unknown
Detection:
malicious
Classification:
n/a
Score:
48 / 100
Signature
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
Threat name:
Win32.Trojan.Phonzy
Status:
Malicious
First seen:
2021-09-07 13:42:45 UTC
AV detection:
15 of 28 (53.57%)
Threat level:
5/5
Verdict:
malicious
Similar samples:
+ 767 additional samples on MalwareBazaar
Unpacked files
SH256 hash:
64504291d0c7a200389df304fa4b88452110ead9cab7de1713393399be8b70d9
MD5 hash:
4f4126b538d7862b2bc1c7c1513d2a18
SHA1 hash:
be809a8fa1804c62bfd91ce3ec67328981dd211f
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
0.75
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
exe 64504291d0c7a200389df304fa4b88452110ead9cab7de1713393399be8b70d9
(this sample)
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.url : hxxp://marketingintelligence.tech/nax/obn.exe