MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 94746ac2df9974eeb567f552a74aa0c2329e60416f3232b85f11ca1a0e0b696b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 3
| SHA256 hash: | 94746ac2df9974eeb567f552a74aa0c2329e60416f3232b85f11ca1a0e0b696b |
|---|---|
| SHA3-384 hash: | 789c5ce30c8f8522b0ad66503604c93e41ee69e05b7d49b3f7743ba085c3efe3669d9d1c826f64cad5d7049eed26fbc9 |
| SHA1 hash: | bda57227822662eff53d46ccd166ec01e5037544 |
| MD5 hash: | 78eefbf9b47850d337b85eaef335e9f9 |
| humanhash: | mountain-wyoming-harry-network |
| File name: | mmm.dll |
| Download: | download sample |
| File size: | 292'864 bytes |
| First seen: | 2020-05-12 04:25:55 UTC |
| Last seen: | 2020-05-12 04:44:31 UTC |
| File type: |  dll |
| MIME type: | application/x-dosexec |
| imphash | 74b799c824380dd2d9e31c6a52e3d368 |
| ssdeep | 3072:fziN8E61w/K2e2Sue2bYSmFG/8UlcIhqzZMUIBevpTJ/Fi/GTpULC1G/iQ:+iEn/Ky+2b+k8UKIkdMUIBoBiOp2KQ |
| Threatray | 34 similar samples on MalwareBazaar |
| TLSH | 0A541247D712919BD4FB5A306AEC1420473D87AF4F2600CAE79E0D6C7A3369D45B12AE |
| Reporter |  JoulK |
| Tags: | dll |
Intelligence
File Origin
# of uploads :
2
# of downloads :
75
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Darkvnc
Status:
Malicious
First seen:
2020-05-05 15:43:09 UTC
File Type:
PE (Dll)
Extracted files:
1
AV detection:
22 of 31 (70.97%)
Threat level:
5/5
Verdict:
malicious
Similar samples:
+ 24 additional samples on MalwareBazaar
Result
Malware family:
n/a
Score:
10/10
Tags:
n/a
Behaviour
Suspicious behavior: MapViewOfSection
Suspicious use of WriteProcessMemory
Suspicious behavior: EnumeratesProcesses
Suspicious use of AdjustPrivilegeToken
Program crash
Suspicious use of SetThreadContext
ServiceHost packer
Suspicious use of NtCreateProcessExOtherParentProcess
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
dll 94746ac2df9974eeb567f552a74aa0c2329e60416f3232b85f11ca1a0e0b696b
(this sample)
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.