MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 6503d26f5fd258aa771f0576ace9f9b135b5609e1836d38a8705d5472f1a574a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 3
| SHA256 hash: | 6503d26f5fd258aa771f0576ace9f9b135b5609e1836d38a8705d5472f1a574a |
|---|---|
| SHA3-384 hash: | 0ce913553be38622e75ecfc7ee5833edf92cb615d40b7be504ecc0ef98666139ab4023cae25ef806163e13bb528b75a8 |
| SHA1 hash: | e1455c4046d0044e4dc3a95192cb7346cf892635 |
| MD5 hash: | 54b8ee39850c658171364e85b008cb1b |
| humanhash: | one-black-arkansas-east |
| File name: | SecuriteInfo.com.Trojan.GenericKD.43187474.26179.28486 |
| Download: | download sample |
| File size: | 527'360 bytes |
| First seen: | 2020-05-21 00:03:24 UTC |
| Last seen: | Never |
| File type: |  exe |
| MIME type: | application/x-dosexec |
| imphash | cad2761c7464465417997664a13512db (1 x Gozi, 1 x Glupteba) |
| ssdeep | 12288:7STnPsZZ6KZ8WA6z0HNMz9EFkcaBJuThh9LIo:+Tw69jdZFNaBJuZ |
| Threatray | 341 similar samples on MalwareBazaar |
| TLSH | 3CB412A0B6E3D432C45F027044E2D7E0D73E3B61E77389832B64266D7F20AD1A67675A |
| Reporter |  SecuriteInfoCom |
Intelligence
File Origin
# of uploads :
1
# of downloads :
77
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Kryptik
Status:
Malicious
First seen:
2020-05-20 02:25:00 UTC
File Type:
PE (Exe)
Extracted files:
32
AV detection:
31 of 48 (64.58%)
Threat level:
2/5
Verdict:
malicious
Similar samples:
+ 331 additional samples on MalwareBazaar
Result
Malware family:
n/a
Score:
5/10
Tags:
n/a
Behaviour
Suspicious behavior: MapViewOfSection
Suspicious behavior: RenamesItself
Suspicious use of UnmapMainImage
Suspicious use of WriteProcessMemory
Suspicious use of SetThreadContext
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
exe 6503d26f5fd258aa771f0576ace9f9b135b5609e1836d38a8705d5472f1a574a
(this sample)
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.