MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7c58672f646a85dd65ae2c5d44fdcfb899584a9a27650418a06ecc495cdf7a86. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



GoldenSpy


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: 7c58672f646a85dd65ae2c5d44fdcfb899584a9a27650418a06ecc495cdf7a86
SHA3-384 hash: 0d22607f882fd403ae23c5830167cb259b8acd98cf3333ea038bd12b190029794afccb21f295572a2308613339619df5
SHA1 hash: e7db11b2f8b0cc97d989312e86dc59d009befb69
MD5 hash: be1a7bbc42d5d6f3a3270201906a68d9
humanhash: edward-lactose-freddie-don
File name:GoldenSpy (3)
Download: download sample
Signature GoldenSpy
File size:4'903'241 bytes
First seen:2020-07-02 14:25:00 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash abb85e8b889dab3b36aa68b03047e6e6 (13 x GoldenSpy)
ssdeep 98304:ZMuJynG6LzHla0q5SHJr/ZB4PHaNuWExOm1paoMKnIm6sco0R:Wu0nFLzFuSHEk5okgQR
Threatray 21 similar samples on MalwareBazaar
TLSH 873633A49FC6C8ECFC8B2535CAB8B197C343092451BD01EBCA06C98A5F63857515EBBD
Reporter JAMESWT_WT
Tags:GoldenSpy

Intelligence


File Origin
# of uploads :
1
# of downloads :
99
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
Win32.Backdoor.GoldenSpy
Status:
Malicious
First seen:
2020-06-18 11:31:24 UTC
File Type:
PE (Exe)
Extracted files:
838
AV detection:
23 of 29 (79.31%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Behaviour
NSIS installer
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments