MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a84ac7f5b69e5eecc050d2048115c73ba534d58fb30441c3e4925792a5fb11c0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a84ac7f5b69e5eecc050d2048115c73ba534d58fb30441c3e4925792a5fb11c0
SHA3-384 hash: 4f6ebf9793a12e412b1c572c80c6b38b088f8cb9d441d80e6fcd1730c68d1d38fd0eff6b60ad11dc803d3017569430fa
SHA1 hash: aec164e6aae94d4164a2caac9c5d73b8c6865669
MD5 hash: 0610f8e7b75ca8ae96317dfb517f5f0d
humanhash: florida-cup-zebra-eighteen
File name:stage2.ps1
Download: download sample
File size:802'236 bytes
First seen:2020-09-11 19:25:53 UTC
Last seen:Never
File type:PowerShell (PS) ps1
MIME type:text/plain
ssdeep 12288:eRX+/UUlItm36Zo0RsleckwT1XRd+EoxZraGyit/UlW:E
TLSH 8105F8E6309165D9C2468BA23F9961F740BEC611C9C66D85F84C6F6BB1DCED33289BC0
Reporter Dashowl
Tags:NetWalker powershell

Intelligence

File Origin
# of uploads :
1
# of downloads :
2'095
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Troj.NetWalk-B.13317.29538.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/a84ac7f5b69e5eecc050d2048115c73ba534d58fb30441c3e4925792a5fb11c0/
Threat name:
Win32.Trojan.Netwalker
Create hunting rule
Status:
Malicious
First seen:
2020-09-09 16:13:54 UTC
AV detection:
10 of 29 (34.48%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Ransomware
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/a84ac7f5b69e5eecc050d2048115c73ba534d58fb30441c3e4925792a5fb11c0

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments