MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 77f074fe3e36bf81bcb2e7527be6603f96ab982aec9e8164734aceba67ee02ed. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 4
| SHA256 hash: | 77f074fe3e36bf81bcb2e7527be6603f96ab982aec9e8164734aceba67ee02ed |
|---|---|
| SHA3-384 hash: | 87a84cebcdfea98f81c90ff5b7ab461557a035cd5329e8a5fffa33c0c1a528f4126aea8f124322b80171ba2b048bf33c |
| SHA1 hash: | e8649cec004e44f54dce3aa7c4b97308c8eab0d5 |
| MD5 hash: | d3dcd642e02c2c374f9f621016c34233 |
| humanhash: | eight-lima-blue-comet |
| File name: | Vsl S005883020026916.exe |
| Download: | download sample |
| File size: | 59'320 bytes |
| First seen: | 2020-10-01 07:26:29 UTC |
| Last seen: | 2020-10-01 08:01:37 UTC |
| File type: |  exe |
| MIME type: | application/x-dosexec |
| imphash | f34d5f2d4577ed6d9ceec516c1f5a744 (48'652 x AgentTesla, 19'463 x Formbook, 12'205 x SnakeKeylogger) |
| ssdeep | 768:Fa+9SlY713qDC2HOLysosdmJh+fcgRO1RVxgrhjHdpUf2hJ:FNS6h6OiHsoBnMM1xgrpnUfU |
| Threatray | 1 similar samples on MalwareBazaar |
| TLSH | 3E4360D49BEDFC99D8398F380722BD82EAF090C3216FC7350DDA71DC6A845906767A46 |
| Reporter |  cocaman |
| Tags: | exe |
Code Signing Certificate
| Organisation: | |
|---|---|
| Issuer: | |
| Algorithm: | sha256WithRSAEncryption |
| Valid from: | Oct 1 02:34:58 2020 GMT |
| Valid to: | Oct 1 02:34:58 2021 GMT |
| Serial number: | 3C21AF28C8BC1CB2F135FABB697901DA |
| Thumbprint Algorithm: | SHA256 |
| Thumbprint: | 06EEBA6533F3C6B6B88402E542D049ED29A407EDE4DABA79E4EA4B8E9F93A387 |
| Source: | This information was brought to you by ReversingLabs A1000 Malware Analysis Platform |
Intelligence
File Origin
# of uploads :
2
# of downloads :
85
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Detection(s):
Result
Verdict:
Clean
Maliciousness:
Behaviour
Sending a UDP request
Launching a process
Creating a window
Result
Threat name:
Unknown
Detection:
malicious
Classification:
n/a
Score:
52 / 100
Signature
Machine Learning detection for sample
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
Threat name:
ByteCode-MSIL.Trojan.GenMlwB
Status:
Malicious
First seen:
2020-10-01 05:20:16 UTC
File Type:
PE (.Net Exe)
Extracted files:
1
AV detection:
19 of 29 (65.52%)
Threat level:
5/5
Detection(s):
Suspicious file
Verdict:
unknown
Similar samples:
Result
Malware family:
n/a
Score:
1/10
Tags:
n/a
Behaviour
Modifies system certificate store
Suspicious use of WriteProcessMemory
Suspicious behavior: EnumeratesProcesses
Suspicious use of AdjustPrivilegeToken
Unpacked files
SH256 hash:
77f074fe3e36bf81bcb2e7527be6603f96ab982aec9e8164734aceba67ee02ed
MD5 hash:
d3dcd642e02c2c374f9f621016c34233
SHA1 hash:
e8649cec004e44f54dce3aa7c4b97308c8eab0d5
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe 77f074fe3e36bf81bcb2e7527be6603f96ab982aec9e8164734aceba67ee02ed
(this sample)
Delivery method
Other
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.