MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b7398f53dd106d0d344faee6d5e6ce71637cad389d3efdcdf7031f45ed1d5bdd. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	b7398f53dd106d0d344faee6d5e6ce71637cad389d3efdcdf7031f45ed1d5bdd
SHA3-384 hash:	8019401fb8e1b6d53d53185c408e441b228804198ddaec72099f365f7c9a655c5de73195f5b0e202293abdb1855a3319
SHA1 hash:	47b2e0ad9b0e0451b95e7560e7b71ce8da774793
MD5 hash:	68c487fdad3b21d806023e8966302a75
humanhash:	zulu-salami-bluebird-table
File name:	68c487fdad3b21d806023e8966302a75.exe
Download:	download sample
File size:	2'544'219 bytes
First seen:	2023-07-28 07:03:07 UTC
Last seen:	2023-07-28 07:45:14 UTC
File type:	exe
MIME type:	application/x-dosexec
ssdeep	49152:irjqkI9wbOEyCbdaveg5Q7FHo+sbC40fDWJmmZ/:d+OKJo+shoWJZZ/
TLSH	T138C5CF03B66786F2E28967B6DDAB8C04C361DA83731FD70B788E23A555433B79C46607
TrID	45.5% (.EXE) Win64 Executable (generic) (10523/12/4) 19.4% (.EXE) Win32 Executable (generic) (4505/5/1) 8.9% (.ICL) Windows Icons Library (generic) (2059/9) 8.7% (.EXE) OS/2 Executable (generic) (2029/13) 8.6% (.EXE) Generic Win/DOS Executable (2002/3)
Reporter	abuse_ch
Tags:	exe

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

258

Origin country :

NL

Vendor Threat Intelligence

CAPE Sandbox

Detection:

n/a

Link:

https://www.capesandbox.com/analysis/435853/

ClamAV Detected

Detection(s):

SecuriteInfo.com.Trojan.GenericKD.68351652.5531.25378.UNOFFICIAL

Alert

Create hunting rule

Dr. Web vxCube Clean

Result

Verdict:

Clean

Maliciousness:

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

overlay packed

Link:

https://www.filescan.io/uploads/64c368621b48787a496fcc7b/reports/6ce4e8d5-ae41-4d7a-bf60-da19529c47cc/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/b7398f53dd106d0d344faee6d5e6ce71637cad389d3efdcdf7031f45ed1d5bdd

Intezer Malicious

Verdict:

Malicious

Link:

https://analyze.intezer.com/analyses/c8bb0796-b0d7-4134-ba95-a2c4b832261f

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

52 / 100

Link:

https://www.joesandbox.com/analysis/1281663

Signature

Machine Learning detection for sample

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/b7398f53dd106d0d344faee6d5e6ce71637cad389d3efdcdf7031f45ed1d5bdd/

ReversingLabs TitaniumCloud ByteCode-MSIL.Trojan.Generic

Threat name:

ByteCode-MSIL.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2023-07-28 07:04:05 UTC

File Type:

PE (.Net Exe)

AV detection:

10 of 23 (43.48%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=w44y6u65cbwq2ncpv3tnlzwoofrxzljytu7p3tpxampul3i5lpoq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/230728-hvx6vacg2w/

UnpacMe

Unpacked files

SH256 hash:

b7398f53dd106d0d344faee6d5e6ce71637cad389d3efdcdf7031f45ed1d5bdd

MD5 hash:

68c487fdad3b21d806023e8966302a75

SHA1 hash:

47b2e0ad9b0e0451b95e7560e7b71ce8da774793

Link:

https://www.unpac.me/results/f01ed7d7-18f2-47e3-9222-22b84b362962/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

File information

---

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

exe b7398f53dd106d0d344faee6d5e6ce71637cad389d3efdcdf7031f45ed1d5bdd

(this sample)

  

URLhaus

https://urlhaus.abuse.ch/url/2627575/

  

Delivery method

Distributed via web download

Cape

https://www.capesandbox.com/analysis/435853/