MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 aacf02f626946da8a021dc8d531c4a210a98f3d2c170e3db43cc867faa1acb38. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Adware.Generic


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments

SHA256 hash: aacf02f626946da8a021dc8d531c4a210a98f3d2c170e3db43cc867faa1acb38
SHA3-384 hash: 31ec1e3177bc06a0a68f036dbfe52aa064bd66724193751b4f4de26782f1c1b3ac90882074ecdf3d7692fa8203f9adf8
SHA1 hash: 39c2a443fd9fe3ddb3a96d1c1386cfabaca43f98
MD5 hash: 93048ece1f7bac9046705b937ffa3440
humanhash: undress-white-edward-double
File name:aacf02f626946da8a021dc8d531c4a210a98f3d2c170e3db43cc867faa1acb38
Download: download sample
Signature Adware.Generic
File size:4'003'498 bytes
First seen:2020-06-03 09:03:58 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 099c0646ea7282d232219f8807883be0 (476 x Formbook, 210 x Loki, 107 x AgentTesla)
ssdeep 98304:t2F/NlVg2rJJoDj397BvDg/H/T0ciJHdcC1:t2F/Nl60JKNhDkTpid1
Threatray 409 similar samples on MalwareBazaar
TLSH 03063372A790E933FA2634716E6DE7AF0B6C5AA532563A4F350E0F5F900B11DD96C030
Reporter raashidbhatt
Tags:Adware.Generic exe

Intelligence


File Origin
# of uploads :
1
# of downloads :
86
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Virus.Ramnit
Status:
Malicious
First seen:
2020-06-03 17:46:28 UTC
AV detection:
31 of 48 (64.58%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Behaviour
Suspicious behavior: GetForegroundWindowSpam
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments