MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6a4d4775de44977d9d3e3797822ed0fbc131e9132c29e1230d80e992b4f08e36. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 6a4d4775de44977d9d3e3797822ed0fbc131e9132c29e1230d80e992b4f08e36
SHA3-384 hash: 21994791daab7d1ff8bfadf924215e7643b04f79003718cb1a6ba955724a112d3c7ea18b6de7d2d86c595d14041b95ad
SHA1 hash: 4fa763596a5c93012c4c2f6e859d231a602ca1d0
MD5 hash: 113a0256fa05ece2a56b88e6285aff7a
humanhash: ink-mars-sodium-artist
File name:113a0256fa05ece2a56b88e6285aff7a.exe
Download: download sample
File size:2'941'440 bytes
First seen:2020-05-18 13:40:27 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 0f1ac2293fdf4509c441f61830edfd51
ssdeep 49152:aWQvadzsUS/gU+vauDWKwZMSnS/Atuk90FN4jkNblD8KHtoXy7okEkzh/XttbcSJ:a7vadzS/gU+vauDWKwZMKS/Atuk90FN/
Threatray 1 similar samples on MalwareBazaar
TLSH DAD54954EA8748F1FD672AB09447FBBF17309B018434CDB6DA64FD49FD73A52120A22A
Reporter abuse_ch
Tags:exe

Intelligence

File Origin
# of uploads :
1
# of downloads :
96
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.DownLoader28.30042.30645.13128.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Ursu
Create hunting rule
Status:
Malicious
First seen:
2019-10-05 02:34:43 UTC
File Type:
PE (Exe)
AV detection:
24 of 48 (50.00%)
Threat level:
  2/5
Verdict:
suspicious
Similar samples:
9617f8a2e320e9d614aef640a76c405df8a6266a30bc9deb3601391082304ae4
Result
Malware family:
n/a
Score:
  6/10
Tags:
n/a
Link:
https://tria.ge/reports/201109-ez6wjcvre6/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Executable exe 6a4d4775de44977d9d3e3797822ed0fbc131e9132c29e1230d80e992b4f08e36

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/364291/
  
Delivery method
Distributed via web download
  
URLhaus
https://urlhaus.abuse.ch/url/364525/

Comments