MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b564806e2e19a5014853a8b9b2f489118d5264e5e118f9075e6804ee38d402fb. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	b564806e2e19a5014853a8b9b2f489118d5264e5e118f9075e6804ee38d402fb
SHA3-384 hash:	7c2ac57881e4c82b36f38272604be7f220def4bc077f573fad4435da339a29933f58e3e5c75480dba5aaa733eb65c342
SHA1 hash:	977c020b7845614730899273b479d94c63c2e89e
MD5 hash:	1d70bee0f06e72c69ede515e3352a48f
humanhash:	paris-steak-happy-sixteen
File name:	b564806e2e19a5014853a8b9b2f489118d5264e5e118f9075e6804ee38d402fb
Download:	download sample
File size:	25'166 bytes
First seen:	2024-07-17 07:06:21 UTC
Last seen:	2024-07-17 07:19:13 UTC
File type:	unknown
MIME type:	text/plain
ssdeep	384:kXg0DBI8Z0xG4PWwDgI2WNMthZcUJUXjLVprGcPka0kjM/b6TOE:ug0DBI8ZaPWhIjMthxUZGqkapY/+OE
TLSH	T1C6B2742A4133866A43A25ED2694F0A2FCA5571FAF5720C18F31CF7E58772A06CD729DC
Reporter	JAMESWT_WT
Tags:	95-164-5-57 contgeraklf-com

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

58

Origin country :

IT

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.VBS.BackDoor.Siggen.17.12116.22287.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/66976d9c7b9add553ed60296/reports/0b517b3f-a7a8-4a8d-9dbf-53022fb3cb6a/overview

Hybrid Analysis Valyria

Verdict:

Malicious

Labled as:

Valyria

Link:

https://www.hybrid-analysis.com/sample/b564806e2e19a5014853a8b9b2f489118d5264e5e118f9075e6804ee38d402fb

InQuest MALICIOUS

Result

Verdict:

MALICIOUS

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/b564806e2e19a5014853a8b9b2f489118d5264e5e118f9075e6804ee38d402fb

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/b564806e2e19a5014853a8b9b2f489118d5264e5e118f9075e6804ee38d402fb/

ReversingLabs TitaniumCloud Script-WScript.Trojan.Valyria

Threat name:

Script-WScript.Trojan.Valyria

Alert

Create hunting rule

Status:

Malicious

First seen:

2024-07-16 18:48:25 UTC

File Type:

Text (VBS)

AV detection:

13 of 38 (34.21%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=wvsia3rodgsqcsctvc43f5ejcggvezhf4empsb26naco4ogual5q._file

Threatray malicious

Verdict:

malicious

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/b564806e2e19a5014853a8b9b2f489118d5264e5e118f9075e6804ee38d402fb