MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 716d698765e5bc3f936f7d28edc5b47839dfe8568a1311a57d2f8dbf73654b7c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Threat unknown

Vendor detections: 10

Intelligence 10 IOCs YARA 5 File information Comments

SHA256 hash:	716d698765e5bc3f936f7d28edc5b47839dfe8568a1311a57d2f8dbf73654b7c
SHA3-384 hash:	45669cf9cdbe3905babf84f53dedcf8b9a3b8a5f9acd57a9ff3f1c29d8de9713c491883eedfb5b03004e49f0b5ca486b
SHA1 hash:	8b8ed92cbdffa9259bf55ca58735a7b9f9ad3722
MD5 hash:	dcf04df282f98a48203a51e9b79b4d46
humanhash:	washington-fourteen-lake-failed
File name:	SecuriteInfo.com.Win64.MalwareX-gen.76411844
Download:	download sample
File size:	27'648 bytes
First seen:	2026-04-10 20:20:47 UTC
Last seen:	2026-04-10 21:17:00 UTC
File type:	exe
MIME type:	application/x-dosexec
ssdeep	768:Y/0WS84xSf8JebY9c80FQr0BdpkvorjXego:Y/0nxGb85m9rjOj
TLSH	T141C21949ABE806A2E8BF0B356D72468647B2F0866523C74F09CD948B1FF779049127F3
TrID	33.1% (.EXE) Win64 Executable (generic) (6522/11/2) 25.6% (.EXE) Win16 NE executable (generic) (5038/12/1) 10.4% (.ICL) Windows Icons Library (generic) (2059/9) 10.3% (.EXE) OS/2 Executable (generic) (2029/13) 10.1% (.EXE) Generic Win/DOS Executable (2002/3)
Magika	pebin
Reporter	SecuriteInfoCom
Tags:	exe

Intelligence

File Origin

# of uploads :

# of downloads :

114

Origin country :

Vendor Threat Intelligence

No detections

Malware family:

n/a

ID:

File name:

net_launcher.exe

Verdict:

No threats detected

Analysis date:

2026-03-27 20:05:41 UTC

Tags:

amsi-bypass

Link:

https://app.any.run/tasks/f1aefe37-2beb-4553-89e8-9a634b336ae2

Note:

ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample

Detection:

n/a

Link:

https://www.capesandbox.com/analysis/61071/

Verdict:

Malicious

Score:

99.1%

Link:

https://cyber-fortress.com/docs/result/index.php?id=69c156f9aacb4c376b1313c2

Tags:

virus msil hype

Result

Verdict:

Malware

Maliciousness:

Behaviour

Сreating synchronization primitives

Sending an HTTP GET request to an infection source

Creating a file in the %temp% directory

Creating a file

Connection attempt to an infection source

Verdict:

Malicious

Threat level:

10/10

Confidence:

100%

Tags:

anti-vm cmd lolbin

Link:

https://www.filescan.io/uploads/69d95bca5ea31bc68a1ef761/reports/b60906bc-389c-4752-8da4-48b57354060d/overview

Verdict:

Malicious

Labled as:

MSILHeracles.Generic

Link:

https://www.hybrid-analysis.com/sample/716d698765e5bc3f936f7d28edc5b47839dfe8568a1311a57d2f8dbf73654b7c

Verdict:

Malicious

File Type:

exe x64

First seen:

2026-03-19T23:20:00Z UTC

Last seen:

2026-04-11T15:37:00Z UTC

Hits:

~100

Link:

https://opentip.kaspersky.com/716d698765e5bc3f936f7d28edc5b47839dfe8568a1311a57d2f8dbf73654b7c/results?tab=lookup

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/611f14ec-2b55-4685-8182-060326abe99e

Score:

28%

Verdict:

Benign

File Type:

Link:

https://malprob.io/report/716d698765e5bc3f936f7d28edc5b47839dfe8568a1311a57d2f8dbf73654b7c

Gathering data

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/716d698765e5bc3f936f7d28edc5b47839dfe8568a1311a57d2f8dbf73654b7c/

Verdict:

Malicious

Threat:

Trojan.Win32

Link:

https://tip.neiki.dev/file/716d698765e5bc3f936f7d28edc5b47839dfe8568a1311a57d2f8dbf73654b7c

Threat name:

Win64.Trojan.Generic

Status:

Suspicious

First seen:

2026-03-20 20:08:27 UTC

File Type:

PE+ (.Net Exe)

Extracted files:

AV detection:

18 of 38 (47.37%)

Threat level:

5/5

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ofwwtb3f4w6d7e3ppuuo3rnupa4572cwrijrdjl5f6g3643fjn6a._file

Result

Malware family:

n/a

Score:

8/10

Tags:

n/a

Link:

https://tria.ge/reports/260410-y48lyabv9n/

Behaviour

Suspicious use of AdjustPrivilegeToken

Loads dropped DLL

Downloads MZ/PE file

Unpacked files

SH256 hash:

716d698765e5bc3f936f7d28edc5b47839dfe8568a1311a57d2f8dbf73654b7c

MD5 hash:

dcf04df282f98a48203a51e9b79b4d46

SHA1 hash:

8b8ed92cbdffa9259bf55ca58735a7b9f9ad3722

Link:

https://www.unpac.me/results/0f594593-04b4-41d2-a8d2-99e68750a910/

Please note that we are no longer able to provide a coverage score for Virus Total.

Threat name:

Malicious File

Score:

0.91

Link:

https://yomi.yoroi.company/submissions/716d698765e5bc3f936f7d28edc5b47839dfe8568a1311a57d2f8dbf73654b7c

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:	CP_Script_Inject_Detector Create hunting rule
Author:	DiegoAnalytics
Description:	Detects attempts to inject code into another process across PE, ELF, Mach-O binaries

Rule name:	Detect_PowerShell_Obfuscation Create hunting rule
Author:	daniyyell
Description:	Detects obfuscated PowerShell commands commonly used in malicious scripts.

Rule name:	NET Create hunting rule
Author:	malware-lu

Rule name:	pe_no_import_table Create hunting rule
Description:	Detect pe file that no import table

Rule name:	VECT_Ransomware Create hunting rule
Author:	Mustafa Bakhit
Description:	Detects activity associated with VECT ransomware. This includes registry modifications and deletions, execution of system and defense-evasion commands, suspicious API usage, mutex creation, file and memory manipulation, ransomware note generation, anti-debugging and anti-analysis techniques, and embedded cryptographic constants (SHA256) characteristic of this malware family. Designed for threat intelligence and malware detection environments.