MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 6655db45455ee07617a6c59c08c42adb41f71aace686438b81f6ae81663b8ab2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 2
| SHA256 hash: | 6655db45455ee07617a6c59c08c42adb41f71aace686438b81f6ae81663b8ab2 |
|---|---|
| SHA3-384 hash: | e9f5f4d3417c6de3e49ecda2a0917e89625cdf710fb1134a945cce0796b5f5629a2afed4b42be941c6cd5967fcd39fc6 |
| SHA1 hash: | b16586d87dfc58321d47f5e9027659ad8731dc7b |
| MD5 hash: | 57da05567ab133314daf8bf261ada466 |
| humanhash: | cardinal-stream-oscar-eleven |
| File name: | ahOUA.dll |
| Download: | download sample |
| File size: | 233'472 bytes |
| First seen: | 2020-12-21 15:49:09 UTC |
| Last seen: | 2020-12-21 17:39:48 UTC |
| File type: |  dll |
| MIME type: | application/x-dosexec |
| imphash | a29f48bc82de7c4703cce1fe1f9ab867 |
| ssdeep | 3072:ZbySz+b7eYB63NtTitmZHfkeTi3mzCg8yBlBTMAPiZw+bNmTc:0y++YwnumZHv+3j8Bex |
| Threatray | 4 similar samples on MalwareBazaar |
| TLSH | 2634AF13B6D8C036D69F12349776C6740B7A78211B78D9CBB7E80DAE4F622E1AD34346 |
| Reporter |  infosecfu |
| Tags: | dll IcedID |
Intelligence
File Origin
# of uploads :
2
# of downloads :
300
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Result
Verdict:
Clean
Maliciousness:
Behaviour
Sending a UDP request
Result
Verdict:
UNKNOWN
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Result
Threat name:
Unknown
Detection:
clean
Classification:
n/a
Score:
1 / 100
Behaviour
Behavior Graph:
n/a
Result
Malware family:
n/a
Score:
3/10
Tags:
n/a
Behaviour
Suspicious use of WriteProcessMemory
Suspicious behavior: EnumeratesProcesses
Suspicious use of AdjustPrivilegeToken
Program crash
Unpacked files
SH256 hash:
6655db45455ee07617a6c59c08c42adb41f71aace686438b81f6ae81663b8ab2
MD5 hash:
57da05567ab133314daf8bf261ada466
SHA1 hash:
b16586d87dfc58321d47f5e9027659ad8731dc7b
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
b1f406b164ffa275c6c7cc1d0981d465a208e7b1e13d264e921435a365a066fb
dll 6655db45455ee07617a6c59c08c42adb41f71aace686438b81f6ae81663b8ab2
(this sample)
Dropped by
SHA256 b1f406b164ffa275c6c7cc1d0981d465a208e7b1e13d264e921435a365a066fb
Delivery method
Distributed via e-mail link
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.