MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9d16b174597dbe3d864d4ca2ee574fa0829a11450b4fda2f586506ca9f5d6581. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

@Libranalysis

A detailed analysis if available at: https://maxkersten.nl/binary-analysis-course/malware-analysis/corona-locker/

Intelligence

---

File Origin

# of uploads :

3

# of downloads :

247

Origin country :

NL

Mail intelligence

No data

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.VBS.Dropper-6.UNOFFICIAL

Alert

Create hunting rule

PUA.Win.Adware.Slugin-6803969-0

Alert

Create hunting rule

PUA.Win.Adware.Slugin-6840354-0

Alert

Create hunting rule

SecuriteInfo.com.PSW.Generic8.ISF.UNOFFICIAL

Alert

Create hunting rule

CERT.PL MWDB

Gathering data

ReversingLabs TitaniumCloud Win32.Trojan.Diztakun

Threat name:

Win32.Trojan.Diztakun

Alert

Create hunting rule

Status:

Malicious

First seen:

2020-04-20 21:35:38 UTC

File Type:

Binary (Archive)

Extracted files:

1

AV detection:

31 of 47 (65.96%)

Threat level:

  5/5

VirusTotal 50.77%

AV coverage:

50.77%

AV detections:

33 / 65

Link:

https://www.virustotal.com/file/9d16b174597dbe3d864d4ca2ee574fa0829a11450b4fda2f586506ca9f5d6581/analysis/1587417248/