MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 799b7395c9f279d8cd1cd24657788ecb37db7ae03c0dddeb3344a95a551d1325. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Intelligence File information Yara 1 Comments

SHA256 hash: 799b7395c9f279d8cd1cd24657788ecb37db7ae03c0dddeb3344a95a551d1325
SHA3-384 hash: 0548efd85144544ad9dfe8cfeb9ed2d8ff03e2e1998a01b3d1591c84f64518d88625f1bd172474d8df283c93d3804a84
SHA1 hash: 75c4ad5454f6293fbcd680984dbc9ea73bd1a64c
MD5 hash: 517882a348924dfa92e0dc6c5d1e525a
humanhash: north-dakota-kilo-wyoming
File name:799b7395c9f279d8cd1cd24657788ecb37db7ae03c0dddeb3344a95a551d1325
Download: download sample
Signature n/a
File size:823'296 bytes
First seen:2020-08-02 07:33:10 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash c73ceb1c88214748c7e7a62dbbde4788
ssdeep 12288:gp9CLf/dCCUSF/KDqEitSHTnXr4EGTt/LkDLELKi/t:yCLf/kC9F/KWEhH8MLELf/
TLSH C3058E02B5C380F2D625193009E7A73ADB34D6461B14EFC79369DF699C332A19E372DA
Reporter @JAMESWT_MHT

Intelligence


File Origin
# of uploads :
1
# of downloads :
43
Origin country :
IT IT
Mail intelligence
No data
Vendor Threat Intelligence
Result
Verdict:
Clean
Maliciousness:

Behaviour
Creating a window
Creating a file
Sending a UDP request
Result
Threat name:
Unknown
Detection:
suspicious
Classification:
n/a
Score:
27 / 100
Signature
a
c
d
e
f
g
h
i
L
M
n
o
p
r
s
t
Behaviour
Behavior Graph:
Threat name:
Win32.Hacktool.ClipboardLogger
Status:
Malicious
First seen:
2019-01-18 01:18:40 UTC
AV detection:
19 of 30 (63.33%)
Threat level
  1/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Behaviour
Suspicious use of SetWindowsHookEx
Suspicious use of SetWindowsHookEx

Yara Signatures


Rule name:win_mbrlock_auto
Author:Felix Bilstein - yara-signator at cocacoding dot com
Description:autogenerated rule brought to you by yara-signator

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments