MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 ab9026f0d46664fa0a1f678471430d750a0717c06288c6a362e8ba8f1795be5c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 2
| SHA256 hash: | ab9026f0d46664fa0a1f678471430d750a0717c06288c6a362e8ba8f1795be5c |
|---|---|
| SHA3-384 hash: | 7dfce500b5b3e322b74f0a7d4289d414c1ab95d94cf10030ef7ade32c710325755f883779dea49b7ea3056bb2eb01c43 |
| SHA1 hash: | e1475996f91f10f1c30daaabeaddcd14e5fa02e0 |
| MD5 hash: | 96426610dbfdf07237c72ce2e35badf6 |
| humanhash: | september-romeo-golf-three |
| File name: | Setup.exe |
| Download: | download sample |
| File size: | 193'904 bytes |
| First seen: | 2020-06-01 06:38:15 UTC |
| Last seen: | Never |
| File type: |  exe |
| MIME type: | application/x-dosexec |
| imphash | 4ebb8d869b17bfd0efae6098c7975892 (1 x RedLineStealer) |
| ssdeep | 3072:1rwwBFX7IJx7C6NUWttyrlgLq/fIy/SL8jEBKlF7cLsmI4gEUM5qmsms0EVhDva+:1rwwBFX7IJx7C6NUWttyrlgLq/H/SL8Z |
| Threatray | 138 similar samples on MalwareBazaar |
| TLSH | A8149E2576C18073C477293108F4DBB6AE7DFD600FA84D9B739817692E202F16736A6B |
| Reporter |  JoulK |
| Tags: | exe |
Intelligence
File Origin
# of uploads :
1
# of downloads :
65
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Himera
Status:
Malicious
First seen:
2020-05-30 03:14:26 UTC
AV detection:
14 of 31 (45.16%)
Threat level:
2/5
Verdict:
unknown
Similar samples:
+ 128 additional samples on MalwareBazaar
Result
Malware family:
n/a
Score:
6/10
Tags:
n/a
Behaviour
Modifies system certificate store
Suspicious behavior: EnumeratesProcesses
Legitimate hosting services abused for malware hosting/C2
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
exe ab9026f0d46664fa0a1f678471430d750a0717c06288c6a362e8ba8f1795be5c
(this sample)
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.