MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 97942d0573a6d997619f9726a0f86a867ccc910a895ff62bfb8e6b030efdd2ec. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments

SHA256 hash: 97942d0573a6d997619f9726a0f86a867ccc910a895ff62bfb8e6b030efdd2ec
SHA3-384 hash: e52e69de432f22a9b67ecb5a8674447b3daba0057b6d121ff9d0cc5fd519179f408cdaab771028f2f7b47d612f431976
SHA1 hash: f98127cdb6c24bbecb394c95c68a4a75436639ea
MD5 hash: 4e0bb8f4a50e7981d80a767eb57539eb
humanhash: pizza-xray-cardinal-spaghetti
File name:SecuriteInfo.com.BAT.DownLoader.404.8343.12254
Download: download sample
File size:1'117'184 bytes
First seen:2020-06-29 09:52:26 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 7098bcf70170154e93a11d06ed62fe58
ssdeep 24576:fNTTCP8otYskdms4bYPsFVUHl70Tvr/7Ra9AKbi2QxgNev:f5T68otYLN4bYkFvr/7Ra9ATxg0
Threatray 61 similar samples on MalwareBazaar
TLSH 8235BF1176C6C433C4BA09B02F2AD7A7457DBD204BB198EB63C85E2E1EB14D15732FA6
Reporter SecuriteInfoCom

Intelligence


File Origin
# of uploads :
1
# of downloads :
72
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
Win32.Trojan.Generic
Status:
Suspicious
First seen:
2020-06-29 09:54:06 UTC
AV detection:
10 of 29 (34.48%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  3/10
Tags:
n/a
Behaviour
Suspicious behavior: EnumeratesProcesses
Suspicious use of WriteProcessMemory
Suspicious use of AdjustPrivilegeToken
Program crash
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments