MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 68cf2072515bb9cf6ad418615c1f52dcdf24ca1ee46d115a3de2146d1d40d59e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Intelligence File information Yara Comments 1

SHA256 hash: 68cf2072515bb9cf6ad418615c1f52dcdf24ca1ee46d115a3de2146d1d40d59e
SHA1 hash: 37111e03e9f5d1e1932051d9c6a5a1314bc1909d
MD5 hash: 3f966ed1ec7ffc9e896b82ea5be707c1
File name:all.ps1
Download: download sample
Signature n/a
File size:802'768 bytes
First seen:2020-05-22 12:46:42 UTC
Last seen:Never
File type:unknown
MIME type:text/plain
ssdeep 12288:N0SaJ0PuSPPaXkZY7W3TlD9bREtyl+vEaY4n2XUN2Ld/AgZ:tZ
TLSH 6705E4F235B1B599014787A93A8A23FF44EEC505D5CA5C46F4486EA9A2FC9E7339C3C0
Reporter @Jouliok
Tags:NetWalker powershell Ransomware

Intelligence


Mail intelligence No data
# of uploads 1
# of downloads 34
Origin country GB GB
ClamAV SecuriteInfo.com.Trojan.Encoder.31876.7734.1772.UNOFFICIAL
VirusTotal:Virustotal results 0.00%

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments



Avatar
Joul Kouchakji commented on 2020-05-22 13:02:49 UTC

https://app.any.run/tasks/96572b61-ab66-438d-9151-eb1b9766d4d5