MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8f4fa407cd9d7becde2ae84a7d82286ae8e78bcdb8fc4e81ffdd97fc657f5fe3. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments

SHA256 hash: 8f4fa407cd9d7becde2ae84a7d82286ae8e78bcdb8fc4e81ffdd97fc657f5fe3
SHA3-384 hash: bd4b7d6368ed50535ba562c0780db48536f9e599fb4ec10b04ef086f3cd3fd47169796816d4704c0f36e049c8720f858
SHA1 hash: 6e8deb70d6485dd012475707c1e5878141dcd0fd
MD5 hash: 1f72616a8a9db5ad7d72e0d08c62a18d
humanhash: one-venus-seven-violet
File name:8f4fa407cd9d7becde2ae84a7d82286ae8e78bcdb8fc4e81ffdd97fc657f5fe3
Download: download sample
File size:4'000'899 bytes
First seen:2020-06-03 09:20:44 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash eb5bc6ff6263b364dfbfb78bdb48ed59 (55 x Adware.Generic, 18 x RaccoonStealer, 8 x Adware.ExtenBro)
ssdeep 98304:s1QTHXijjg4nP5+8+xhC5NSqyNhVjMVN+IJl1Bj+Yc:ILjg4nhn5Dkob+u1kB
Threatray 46 similar samples on MalwareBazaar
TLSH 30061227B298A53EC49E27350673A01058FFB6ADF817BE1666F4C48CCF664C01F3A665
Reporter raashidbhatt
Tags:exe

Intelligence


File Origin
# of uploads :
1
# of downloads :
60
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.PUA.Falcoware
Status:
Malicious
First seen:
2020-06-03 08:15:29 UTC
AV detection:
11 of 31 (35.48%)
Threat level:
  1/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Behaviour
Suspicious behavior: GetForegroundWindowSpam
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments