MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 86fc70d24f79a34c46ef66112ef4756639fcad2f2d7288e0eeb0448ffab90428. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments

SHA256 hash: 86fc70d24f79a34c46ef66112ef4756639fcad2f2d7288e0eeb0448ffab90428
SHA3-384 hash: 1ac3741b687023e0e74268cc32c56750ab6c5f923f7db4423fefe7d597b1f333bb9a8202524b09bb8f2fe23a85d8d60d
SHA1 hash: 78d6571da105f4793ae1aa022e0a6f90dbf03d44
MD5 hash: 5ea805c69deca701f2310a079d1c5502
humanhash: alabama-blossom-kentucky-wyoming
File name:dorflersaladreviews.jar
Download: download sample
File size:3'041'142 bytes
First seen:2021-12-15 09:37:32 UTC
Last seen:Never
File type:Java file jar
MIME type:application/zip
ssdeep 49152:mSgIiTnj3utZrDgcurJMI+GN7N8UHhfrn2qnmiU2PstmZ3YM80exi:mSDg3uzrD9HI+M8UBCumCs460eI
TLSH T19CE5E023CA9BC828CE7B89F3B1C74361693657A59D0E866F13E069804F7D58B43E1B35
Reporter abuse_ch
Tags:jar

Intelligence


File Origin
# of uploads :
1
# of downloads :
154
Origin country :
n/a
Vendor Threat Intelligence
Malware family:
n/a
ID:
1
File name:
https://cdn.discordapp.com/attachments/909577590967271445/909582476685496370/Rank_Generator.zip
Verdict:
Suspicious activity
Analysis date:
2021-11-14 23:19:20 UTC
Tags:
n/a

Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Result
Threat name:
Unknown
Detection:
malicious
Classification:
n/a
Score:
48 / 100
Signature
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
behaviorgraph top1 signatures2 2 Behavior Graph ID: 540242 Sample: dorflersaladreviews.jar Startdate: 15/12/2021 Architecture: WINDOWS Score: 48 18 Multi AV Scanner detection for submitted file 2->18 8 cmd.exe 2 2->8         started        process3 process4 10 java.exe 5 8->10         started        12 conhost.exe 8->12         started        process5 14 icacls.exe 1 10->14         started        process6 16 conhost.exe 14->16         started       
Threat name:
ByteCode-JAVA.Trojan.Coffeext
Status:
Malicious
First seen:
2021-12-15 03:49:12 UTC
File Type:
Binary (Archive)
Extracted files:
1439
AV detection:
14 of 45 (31.11%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Java file jar 86fc70d24f79a34c46ef66112ef4756639fcad2f2d7288e0eeb0448ffab90428

(this sample)

  
Delivery method
Distributed via web download

Comments