MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 8b1cbfd7ebbd072782a2748d614c53c2084159ef8ccc8f11247c539923ff44a9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 3
| SHA256 hash: | 8b1cbfd7ebbd072782a2748d614c53c2084159ef8ccc8f11247c539923ff44a9 |
|---|---|
| SHA3-384 hash: | 6aa00753101a5eeb5dabf58133c633c242aa941704ea185202919a77a138caf7c28266550afaa1c55b32595b991e87c6 |
| SHA1 hash: | 2ce7b66cbe90a0b37391c362dcc23dc22005d449 |
| MD5 hash: | acfe23faa17c32540d383056b428e706 |
| humanhash: | michigan-ink-carolina-oklahoma |
| File name: | SecuriteInfo.com.Trojan.GenericKD.33884758.1623.26876 |
| Download: | download sample |
| File size: | 237'568 bytes |
| First seen: | 2020-06-20 02:34:21 UTC |
| Last seen: | Never |
| File type: |  exe |
| MIME type: | application/x-dosexec |
| imphash | bf5a4aa99e5b160f8521cadd6bfe73b8 (432 x RedLineStealer, 31 x AgentTesla, 12 x DCRat) |
| ssdeep | 6144:+DKW1Lgbdl0TBBvjc/kXQzMCHOr4n/1aIP7:Yh1Lk70TnvjcMXQz7HOr4n/1JP7 |
| Threatray | 178 similar samples on MalwareBazaar |
| TLSH | 3434BF1035D1C1B3C4BA153088E6CB799A7A7032076A96D7BADC17BA6F203E1A3361CD |
| Reporter |  SecuriteInfoCom |
Intelligence
File Origin
# of uploads :
1
# of downloads :
79
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Gathering data
Threat name:
Win32.Hacktool.Binder
Status:
Malicious
First seen:
2020-04-04 07:09:00 UTC
AV detection:
27 of 31 (87.10%)
Threat level:
1/5
Verdict:
malicious
Similar samples:
+ 168 additional samples on MalwareBazaar
Result
Malware family:
n/a
Score:
1/10
Tags:
n/a
Behaviour
Suspicious use of AdjustPrivilegeToken
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
exe 8b1cbfd7ebbd072782a2748d614c53c2084159ef8ccc8f11247c539923ff44a9
(this sample)
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.