MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b634177f6a7b2c970dbc79ab94aa911d31ae2559456bae1f0fbe08d6d340f0ba. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Adware.ExtenBro


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: b634177f6a7b2c970dbc79ab94aa911d31ae2559456bae1f0fbe08d6d340f0ba
SHA3-384 hash: 14b7e0e8f2ff5b6914f67c809bad9970b2007896d45a9de052e22f4552eb41ada5bc94145982db259b4e5be698be15c2
SHA1 hash: 6a14ce4a7e3a486d5285b0b5903db1ccd9f89d2d
MD5 hash: c7f48d3cf919a18f8fee212f1f0a1251
humanhash: equal-speaker-london-queen
File name:b634177f6a7b2c970dbc79ab94aa911d31ae2559456bae1f0fbe08d6d340f0ba
Download: download sample
Signature Adware.ExtenBro
File size:5'193'248 bytes
First seen:2020-06-03 09:21:58 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 5e4b5fde459a1e0a695c25a4e9bb3314 (5 x Adware.ExtenBro)
ssdeep 98304:cuHOBoKqgz2d92FtMuZOzXPa/MxsIEveC4leiodUJFP5oWFmr8Lgr:JHOBGg89GrOzXPaExs1+odoFP5o48
Threatray 26 similar samples on MalwareBazaar
TLSH AC3623331B792049D1E9CC39A5377EE0B0F753978B82ACB459D6E8C625128E4F7079A3
Reporter raashidbhatt
Tags:Adware.ExtenBro exe

Intelligence


File Origin
# of uploads :
1
# of downloads :
112
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Vigua
Status:
Malicious
First seen:
2020-06-03 08:15:29 UTC
AV detection:
22 of 31 (70.97%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Behaviour
Suspicious behavior: EnumeratesProcesses
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments