MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 76d0b8d787b5c68ab355e7adaff12464fd14386c261e703a504f4fa5b77b6e8d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	76d0b8d787b5c68ab355e7adaff12464fd14386c261e703a504f4fa5b77b6e8d
SHA3-384 hash:	db94e193d34b56a64a56f24200aa3e8c590cb6553bcea28a6384a7bb39f88ee318374ad4cf3da4fe98a97c1d1d777dbb
SHA1 hash:	ee611017834bead17c3d409a4fa274875c753846
MD5 hash:	fd28657955211a6c4a3a345534b0655d
humanhash:	quiet-potato-south-ten
File name:	76d0b8d787b5c68ab355e7adaff12464fd14386c261e703a504f4fa5b77b6e8d.exe
Download:	download sample
File size:	12'800 bytes
First seen:	2026-10-17 09:12:38 UTC
Last seen:	Never
File type:	exe
MIME type:	application/vnd.microsoft.portable-executable
imphash	8e5cf0b748b7b6befcbb18b4cba28f6b
ssdeep	192:UuPuhTREiy4TEASwXelFoec3lIbvrFOWymQYmyR02Ho5K:UC0TDSwGuec3lxDV2Ha
TLSH	T1CA426D4BE2EC411AC4B305701AE39F505227BD958E28CB4A6E162B2F6C307A0FE17736
TrID	52.3% (.EXE) Win32 EXE Yoda's Crypter (26569/9/4) 12.9% (.DLL) Win32 Dynamic Link Library (generic) (6578/25/2) 9.9% (.EXE) Win16 NE executable (generic) (5038/12/1) 8.8% (.EXE) Win32 Executable (generic) (4504/4/1) 4.0% (.ICL) Windows Icons Library (generic) (2059/9)
Magika	pebin
dhash icon	78ecbe98dcb6ccd4
Reporter	whack_sh
Tags:	exe

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

181

Origin country :

US

Vendor Threat Intelligence

ACCE Unknown

No detections

CAPE Sandbox

Detection:

n/a

Link:

https://www.capesandbox.com/analysis/92357/

ClamAV Detected

Detection(s):

Win.Trojan.Vjadtre-68

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

96.5%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6ad33c336f551121ba16a79d

Tags:

vjadtre trojan virus

Dr. Web vxCube Clean

Result

Verdict:

Clean

Maliciousness:

Behaviour

Creating a window

Sending a custom TCP request

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

microsoft_visual_cc packed packed upx

Link:

https://www.filescan.io/uploads/6ad33c2b1afbfc7a0852cb60/reports/53887e1f-4e0d-42f4-9dbd-982c7b11f4ad/overview

Hybrid Analysis Win/malicious_confidence_90%

Verdict:

Malicious

Labled as:

Win/malicious_confidence_90%

Link:

https://www.hybrid-analysis.com/sample/76d0b8d787b5c68ab355e7adaff12464fd14386c261e703a504f4fa5b77b6e8d

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

exe x32

First seen:

2010-08-06T07:10:00Z UTC

Last seen:

2026-10-18T17:56:00Z UTC

Hits:

~10000

Link:

https://opentip.kaspersky.com/76d0b8d787b5c68ab355e7adaff12464fd14386c261e703a504f4fa5b77b6e8d/results?tab=lookup

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/62528a6e-646c-466d-b78b-8157e8c68c90

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

56 / 100

Link:

https://www.joesandbox.com/analysis/1988339

Signature

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

84%

Verdict:

Malware

File Type:

PE

Link:

https://malprob.io/report/76d0b8d787b5c68ab355e7adaff12464fd14386c261e703a504f4fa5b77b6e8d

Malva.RE inconclusive

Verdict:

inconclusive

YARA:

4 match(es)

Tags:

Executable PE (Portable Executable) PE File Layout Win 32 Exe x86

Link:

https://app.malva.re/file/fd28657955211a6c4a3a345534b0655d

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/76d0b8d787b5c68ab355e7adaff12464fd14386c261e703a504f4fa5b77b6e8d/

ReversingLabs TitaniumCloud Win32.Trojan.AdvML

Threat name:

Win32.Trojan.AdvML

Alert

Create hunting rule

Status:

Malicious

First seen:

2011-07-09 22:29:00 UTC

File Type:

PE (Exe)

Extracted files:

4

AV detection:

18 of 36 (50.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=o3ilrv4hwxdivm2v46w274jemt6riodmeyphaosqj5h2ln33n2gq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

discovery

Link:

https://tria.ge/reports/261017-k6v7qscx6j/

Behaviour

Suspicious use of SetWindowsHookEx

System Location Discovery: System Language Discovery

UnpacMe 2

Unpacked files

SH256 hash:

76d0b8d787b5c68ab355e7adaff12464fd14386c261e703a504f4fa5b77b6e8d

MD5 hash:

fd28657955211a6c4a3a345534b0655d

SHA1 hash:

ee611017834bead17c3d409a4fa274875c753846

Link:

https://www.unpac.me/results/d42414d3-7879-4d28-bc39-74ec257b7315/

SH256 hash:

46ca90519e53205eb0953ead29cf16f32abab164431248b3939d7036859bb709

MD5 hash:

90ee503640c378bae5dfb4f211a6a1af

SHA1 hash:

f2dbc27123f936998bb6550bc08962038750be12

Link:

https://www.unpac.me/results/d42414d3-7879-4d28-bc39-74ec257b7315/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.14

Link:

https://yomi.yoroi.company/submissions/76d0b8d787b5c68ab355e7adaff12464fd14386c261e703a504f4fa5b77b6e8d

File information

---

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

exe 76d0b8d787b5c68ab355e7adaff12464fd14386c261e703a504f4fa5b77b6e8d

(this sample)

  

Delivery method

Distributed via web download

  

URLhaus

https://urlhaus.abuse.ch/url/3518999/

Cape

https://www.capesandbox.com/analysis/92357/