MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9bbbfe2ba3734513d22aac9b236de6d169b43a202cd93d3e1cf08f474862435e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments

SHA256 hash: 9bbbfe2ba3734513d22aac9b236de6d169b43a202cd93d3e1cf08f474862435e
SHA3-384 hash: 280eb2b86b3ebdaaf126bbb0d5a000d5b54d160d509c7d5231cdfcbc47da5ddcd9dc21f4c84436d765479bb5f88f85e5
SHA1 hash: 8cb19a1ddfc250f8bbb38b04e818f9c0d7e97024
MD5 hash: 17003f75f37dd951d8d9c8c60b09a018
humanhash: kitten-queen-delaware-beer
File name:9bbbfe2ba3734513d22aac9b236de6d169b43a202cd93d3e1cf08f474862435e.bin
Download: download sample
File size:286'720 bytes
First seen:2020-11-03 07:52:19 UTC
Last seen:2020-11-03 10:00:16 UTC
File type:Executable exe
MIME type:application/x-dosexec
ssdeep 6144:vFhtsrNo80HQFvLnSC5pyloooJRZWiz42nQ2:tht89/JLylooq42
TLSH 96541909ED429968C87ABA3129FFE235CA314E1C401B942BEFAF5F44EA3F3905D5D146
Reporter JAMESWT_WT

Intelligence


File Origin
# of uploads :
2
# of downloads :
85
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
Clean
Maliciousness:
Result
Verdict:
UNKNOWN
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Result
Threat name:
Unknown
Detection:
malicious
Classification:
n/a
Score:
52 / 100
Signature
Machine Learning detection for sample
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
Threat name:
Win32.Trojan.Wacatac
Status:
Malicious
First seen:
2020-10-20 01:53:55 UTC
File Type:
PE (Exe)
AV detection:
7 of 29 (24.14%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Unpacked files
SH256 hash:
9bbbfe2ba3734513d22aac9b236de6d169b43a202cd93d3e1cf08f474862435e
MD5 hash:
17003f75f37dd951d8d9c8c60b09a018
SHA1 hash:
8cb19a1ddfc250f8bbb38b04e818f9c0d7e97024
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments