MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8009cfd09b393432a7047fb1cd4cd0f20f6b2371a01b7539437870e15f16378a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8009cfd09b393432a7047fb1cd4cd0f20f6b2371a01b7539437870e15f16378a
SHA3-384 hash: 4cae2919858d7f15c0d8389f312e5ea55ebf356e48af6796cf67923e4a657e323debc9cd3346e635f9bdf99eec743b93
SHA1 hash: 0d1e8cf3369bf46fc3730a60b20f8b287c9fe092
MD5 hash: 462fdb23dc185e0736be4ba5271d2ba4
humanhash: delta-solar-september-hot
File name:8009cfd09b393432a7047fb1cd4cd0f20f6b2371a01b7539437870e15f16378a
Download: download sample
File size:6'656 bytes
First seen:2020-06-03 09:53:27 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash f34d5f2d4577ed6d9ceec516c1f5a744 (48'652 x AgentTesla, 19'463 x Formbook, 12'204 x SnakeKeylogger)
ssdeep 96:QBgb7t+0XzVzoS+GCZwrllDCo796ESJD6VFzNt:rHt+0xzoSbC8ll++96HJY/
TLSH 84D1E601F7AC4A27C4EA0B328E7B570477B5E29653B7C78EAC85435D6E52B548503BF0
Reporter raashidbhatt
Tags:exe

Intelligence

File Origin
# of uploads :
1
# of downloads :
65
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Batlauncher
Create hunting rule
Status:
Malicious
First seen:
2020-06-03 17:09:59 UTC
AV detection:
20 of 48 (41.67%)
Threat level:
  2/5
Verdict:
unknown
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Link:
https://tria.ge/reports/201109-6hr9l4tcs6/
Behaviour
Suspicious use of WriteProcessMemory
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments