MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b0a296e50332c3e9b1a50247c8c9818a9e8dd9269ce786ecda84116f85f4d655. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: b0a296e50332c3e9b1a50247c8c9818a9e8dd9269ce786ecda84116f85f4d655
SHA3-384 hash: 16c3d8b69553aacc2ddb3522c1ea2ee090f3c03a49c656a2c94259b42bad25f684f16f22de9684259e944d48649e32fd
SHA1 hash: 29efb79302b4017e02667b83f4f3305806ae4a3e
MD5 hash: e9c79004a60995930784b88437fec04e
humanhash: lion-hawaii-yellow-spring
File name:SecuriteInfo.com.Trojan.Siggen9.22022.24846.3222
Download: download sample
File size:526'336 bytes
First seen:2020-03-18 15:08:09 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash f34d5f2d4577ed6d9ceec516c1f5a744 (48'658 x AgentTesla, 19'469 x Formbook, 12'208 x SnakeKeylogger)
ssdeep 6144:VWb7rXar2dwukctFPQOXyIKQp115jcWPIqX+CZYSH9:VWbnqr2JftytIKQp13fPIqNCm
TLSH B0B4791E71058D34FEE93975EC46B1BF0C2E6B0CEA21D70BA01A6E491B6ED1396C0E57
Reporter SecuriteInfoCom

Intelligence


File Origin
# of uploads :
1
# of downloads :
83
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Status:
Malicious
First seen:
2020-03-18 04:02:58 UTC
AV detection:
26 of 31 (83.87%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Executable exe b0a296e50332c3e9b1a50247c8c9818a9e8dd9269ce786ecda84116f85f4d655

(this sample)

  
Delivery method
Distributed via web download

Comments