MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 85f67196f7f8ac8d855818e6d13c6e09c58950b739e8be79a1dfdd33cbc298c6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	85f67196f7f8ac8d855818e6d13c6e09c58950b739e8be79a1dfdd33cbc298c6
SHA3-384 hash:	b983e2c914889976aabe2ef596607d8e4e466afb76f1550db6e4fba36df5ee02889836e56c3b05d0f5d200b93cab0f73
SHA1 hash:	4f1a549d061e5cf3b40e0d9c8c7f020af4ae9bd5
MD5 hash:	277d48cd3049b4919ecf05eb6b271577
humanhash:	robert-oven-rugby-sink
File name:	c64jpg
Download:	download sample
Signature	Gozi Alert Create hunting rule
File size:	467'604 bytes
First seen:	2023-03-16 10:50:19 UTC
Last seen:	2023-06-21 13:28:04 UTC
File type:	unknown
MIME type:	application/octet-stream
ssdeep	12288:TmNxtI6eI5GfeDpAw7nJ8YNTlXEldBhvf4I9E2+p:T40xaAw7JdNZex9Kp
TLSH	T127A423D9C35E004FFD18F4BAE99AF0CC781DA3D5EE29D1721AA95E9A128537C508DF80
Reporter	JAMESWT_WT
Tags:	GLS Gozi plugin Ursnif

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

90

Origin country :

IT

Vendor Threat Intelligence

FileScan.IO No Threat

Verdict:

No Threat

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6412f4985cfcbe477e1510f1/reports/6454db42-2804-4c18-af46-f75654ce34c9/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/85f67196f7f8ac8d855818e6d13c6e09c58950b739e8be79a1dfdd33cbc298c6

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/85f67196f7f8ac8d855818e6d13c6e09c58950b739e8be79a1dfdd33cbc298c6/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=qx3hdfxx7cwi3bkyddtncpdobhcysufxhhul46nb37oths6ctdda._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI ursnif3

Threat name:

ursnif3

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/85f67196f7f8ac8d855818e6d13c6e09c58950b739e8be79a1dfdd33cbc298c6