MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 929ebb7e7982c89438ccbb2f9b78ed4db55ebecbddbcd2840dbaa40dad8cd4d7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 929ebb7e7982c89438ccbb2f9b78ed4db55ebecbddbcd2840dbaa40dad8cd4d7
SHA3-384 hash: fccaae6f76c0d4ac18e20f086af3bd953f609e4ff7b9931deab498b1d7b8d941303ee682ab73e95968e20ebd3a29e904
SHA1 hash: ffbb96caab03d5b6c35bdb01b664ebee53bb2538
MD5 hash: 02439ec87ee475dd466f815bc5150ed5
humanhash: jupiter-cat-oven-eighteen
File name:SecuriteInfo.com.Variant.Johnnie.216272.10326.13253
Download: download sample
File size:726'528 bytes
First seen:2020-07-07 05:46:40 UTC
Last seen:Never
File type:DLL dll
MIME type:application/x-dosexec
imphash 3413981ec1c24f4dda86c5182fc790f1
ssdeep 12288:fN448BxtZ7gea3uVdFG44qV5F+sfhANTfsLt8XxyCAFsGlM/ux/0g:SzBxtZ7geYuVdFG44qV5F+sfhANTfsLT
Threatray 1 similar samples on MalwareBazaar
TLSH 71F4B55A5D30869FE20716BC819C06B4ED3659210F3B8FD7EF8035B658336E2F9B1A64
Reporter SecuriteInfoCom

Intelligence

File Origin
# of uploads :
1
# of downloads :
66
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://www.capesandbox.com/analysis/21826/
Detection(s):
SecuriteInfo.com.Variant.Johnnie.216272.10326.13253.UNOFFICIAL
Create hunting rule

PUA.Win.Downloader.Aiis-6803892-0
Create hunting rule

Result
Verdict:
Clean
Maliciousness:
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/929ebb7e7982c89438ccbb2f9b78ed4db55ebecbddbcd2840dbaa40dad8cd4d7/
Threat name:
Win32.Trojan.Johnnie
Create hunting rule
Status:
Malicious
First seen:
2013-06-14 20:03:00 UTC
AV detection:
10 of 29 (34.48%)
Threat level:
  5/5
Verdict:
unknown
Similar samples:
102c31fbd568e5f1fba04da1b3a7c68681113022f9fd7655ed1edea72e1d506b
Result
Malware family:
n/a
Score:
  3/10
Tags:
n/a
Link:
https://tria.ge/reports/200707-8b8w2bshb2/
Behaviour
Suspicious use of WriteProcessMemory
Suspicious use of AdjustPrivilegeToken
Suspicious behavior: EnumeratesProcesses
Suspicious use of AdjustPrivilegeToken
Suspicious behavior: EnumeratesProcesses
Suspicious use of WriteProcessMemory
Program crash
Program crash
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Cape
Cape
https://www.capesandbox.com/analysis/21826/

Comments