MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 b4310931a2cfb446be2836b6408ed31711cdd0335f5bd1d9c29c1c54a6ad1d6f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 6
| SHA256 hash: | b4310931a2cfb446be2836b6408ed31711cdd0335f5bd1d9c29c1c54a6ad1d6f |
|---|---|
| SHA3-384 hash: | 5362c69f2d2deb9ef3b2a11f0402b0a037ad5fd2de8b2bd17386b332f297b85c9ef1efea6e499540357bfb20499f3652 |
| SHA1 hash: | b65d35522f95f3e581e415eef5192534022ab6e5 |
| MD5 hash: | b05488b0b63872566a675609f4faf055 |
| humanhash: | carpet-burger-diet-kansas |
| File name: | b05488b0b63872566a675609f4faf055.exe |
| Download: | download sample |
| File size: | 593'420 bytes |
| First seen: | 2021-05-09 06:12:49 UTC |
| Last seen: | Never |
| File type: |  exe |
| MIME type: | application/x-dosexec |
| imphash | 08a879d554c99744f28f371eb1c590a6 (2 x ArkeiStealer, 1 x RaccoonStealer) |
| ssdeep | 12288:8Uf6GgYdyR6XH5Gwrt4Cl5YRc6tqe9XTyct3DHJ8zmz:8Uf65YdyU359rt4RRFgU3DHJ8z6 |
| TLSH | 11C4E121B681C079DC6715764865DAB14E5DB862176209FF3BCC3ABAEF282D1B73130E |
| Reporter |  abuse_ch |
| Tags: | exe |
Intelligence
File Origin
# of uploads :
1
# of downloads :
130
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Detection(s):
Result
Verdict:
Malware
Maliciousness:
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Result
Threat name:
Unknown
Detection:
malicious
Classification:
n/a
Score:
52 / 100
Signature
Machine Learning detection for sample
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
Threat name:
Win32.Trojan.Tnega
Status:
Malicious
First seen:
2021-05-09 03:21:40 UTC
AV detection:
20 of 46 (43.48%)
Threat level:
5/5
Unpacked files
SH256 hash:
b4310931a2cfb446be2836b6408ed31711cdd0335f5bd1d9c29c1c54a6ad1d6f
MD5 hash:
b05488b0b63872566a675609f4faf055
SHA1 hash:
b65d35522f95f3e581e415eef5192534022ab6e5
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
exe b4310931a2cfb446be2836b6408ed31711cdd0335f5bd1d9c29c1c54a6ad1d6f
(this sample)
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.============================================================
MBC behaviors list (github.com/accidentalrebel/mbcscan):
============================================================
0) [C0027.009] Cryptography Micro-objective::RC4::Encrypt Data
1) [C0021.004] Cryptography Micro-objective::RC4 PRGA::Generate Pseudo-random Sequence
2) [C0034.001] Operating System Micro-objective::Set Variable::Environment Variable
3) [C0041] Process Micro-objective::Set Thread Local Storage Value
4) [C0018] Process Micro-objective::Terminate Process