MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8890ad3c345d1fd2513fef65c10122b47ed7e72764d6dbfebf36076cef545a7c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	8890ad3c345d1fd2513fef65c10122b47ed7e72764d6dbfebf36076cef545a7c
SHA3-384 hash:	ccdedc67e7dbc37599e7699dd2150021541fa437f54d2fc3c42888f88955749d63a23dc0e66ab471b54e5cf68b352fc5
SHA1 hash:	0172e23db07f433ae4aef2209248222caa75eabe
MD5 hash:	7ff623d6cae2bf589ad0c2355837d5b8
humanhash:	crazy-potato-zebra-magazine
File name:	klamingosa.exe
Download:	download sample
File size:	1'316'864 bytes
First seen:	2025-04-05 12:20:13 UTC
Last seen:	Never
File type:	exe
MIME type:	application/x-dosexec
ssdeep	3:vthltllPllEYZcFTS9gXeF+X32vl/:vtzmVg3F+X32
TLSH	T19C55220BC2F0AFE8C00C20F8030B8F00222E0C280B20C20E0FE8000EFCC00BC20CE202
TrID	25.3% (.ICL) Windows Icons Library (generic) (2059/9) 24.9% (.EXE) OS/2 Executable (generic) (2029/13) 24.6% (.EXE) Generic Win/DOS Executable (2002/3) 24.6% (.EXE) DOS Executable Generic (2000/1) 0.3% (.VXD) VXD Driver (29/21)
Magika	pebin
Reporter	aachum
Tags:	exe

iamaachum

https://github.com/Xform1Z121/rihuata/raw/refs/heads/main/klamingosa.exe

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

177

Origin country :

ES

Vendor Threat Intelligence

CAPE Sandbox

Detection:

n/a

Link:

https://www.capesandbox.com/analysis/732/

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=67f121fccfd0a37f830ed50c

Tags:

n/a

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  2.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/67f12008b070fb3f945f2d00/reports/ec10c398-090a-480d-a05a-6720c496682b/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/8890ad3c345d1fd2513fef65c10122b47ed7e72764d6dbfebf36076cef545a7c

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/159f9613-8c11-42da-a8f3-6008001ea6c6

Joe Sandbox unknown

Result

Threat name:

n/a

Detection:

unknown

Classification:

n/a

Score:

0 / 100

Link:

https://www.joesandbox.com/analysis/1657265

Behaviour

Behavior Graph:

Download SVG

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/8890ad3c345d1fd2513fef65c10122b47ed7e72764d6dbfebf36076cef545a7c/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=rcik2pbulup5euj755s4cajcwr7npzzhmtlnx7v7gydwz32ulj6a._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

n/a

Link:

https://tria.ge/reports/250405-phzx8syl12/

Threat.Zone Unknown

Verdict:

Unknown

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/e014be92-22db-4417-8790-b822c603aad5

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/8890ad3c345d1fd2513fef65c10122b47ed7e72764d6dbfebf36076cef545a7c

File information

---

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

exe 8890ad3c345d1fd2513fef65c10122b47ed7e72764d6dbfebf36076cef545a7c

(this sample)

  

Delivery method

Distributed via web download

Cape

https://www.capesandbox.com/analysis/732/

  

URLhaus

https://urlhaus.abuse.ch/url/3502551/