MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 92d27ddad8c8e5781c8a30b21aefcd5f821b7c62a50549aff47f519c07245702. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Smoke Loader


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 92d27ddad8c8e5781c8a30b21aefcd5f821b7c62a50549aff47f519c07245702
SHA3-384 hash: 55e0158a9d503bf965df479cc123dc54e3807e7b10b2d42786516f297ac4dd374f9cb8ceeadb89d90e80edefc6ab2865
SHA1 hash: 5d6c1e6d0cba91e5482fb567de55697b5dd8937b
MD5 hash: 3f8c44a40c964880aa12e0e16cd16051
humanhash: jig-kitten-september-december
File name:file
Download: download sample
Signature Smoke Loader
Create hunting rule
File size:209'618 bytes
First seen:2020-12-08 18:38:57 UTC
Last seen:Never
File type: lha
MIME type:application/x-lzh-compressed
ssdeep 3072:Rdajo68DsRNOcw6YJY+eWKtpDvnIxydCQUM6ajuW13qsCC7fPMAn0bg9i4Ydozj6:3cwYkYJniLQe6NCNA0GiTon6
TLSH 8C24125E55E4931B6A79AF150FE0E0E94C8C44092D4FB364E8B8CBB5754B3EB1E29025
Reporter fabjer
Tags:lzh

Intelligence

File Origin
# of uploads :
1
# of downloads :
127
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.27279.LZHHeur.Exe.UNOFFICIAL
Create hunting rule

Result
Verdict:
UNKNOWN
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/92d27ddad8c8e5781c8a30b21aefcd5f821b7c62a50549aff47f519c07245702/
Threat name:
Win32.Dropper.Dropback
Create hunting rule
Status:
Malicious
First seen:
2020-12-08 15:46:35 UTC
AV detection:
14 of 29 (48.28%)
Threat level:
  3/5
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.10
Link:
https://yomi.yoroi.company/submissions/92d27ddad8c8e5781c8a30b21aefcd5f821b7c62a50549aff47f519c07245702

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Smoke Loader

lha 92d27ddad8c8e5781c8a30b21aefcd5f821b7c62a50549aff47f519c07245702

(this sample)

Smoke Loader

Executable exe a9d54a962d46e4a2d40da284aa8b3a25a3b4e93b7c388890cd38b838a1a65433

  
Dropping
SHA256 a9d54a962d46e4a2d40da284aa8b3a25a3b4e93b7c388890cd38b838a1a65433
  
Delivery method
Distributed via e-mail attachment

Comments