MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ba516dbe1b2e00f3d4e20a5b8b90ef9d7e0850ec82350f84aa6fe42583d5bd68. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Intelligence File information Yara Comments

SHA256 hash: ba516dbe1b2e00f3d4e20a5b8b90ef9d7e0850ec82350f84aa6fe42583d5bd68
SHA3-384 hash: 9700317a4289b6b535985d63ece0450d361f9330132c0e855108f1abbe33107d265f6ba6e569124337f588b59fe4c252
SHA1 hash: 2ea343b230aa3c54df9fbc599e9153aa66139880
MD5 hash: c6cb2bbfaa1c9bf0d9e4a39728556d96
humanhash: zebra-autumn-winner-may
File name:kins_1.0.0.4.vir
Download: download sample
Signature VMZeuS
File size:189'440 bytes
First seen:2020-07-19 19:42:07 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 213bbd1e4e3a98d5d3d60ac7aec716b0
ssdeep 3072:bz4HM0Svt2+5sX2q8nerVpqsRurWmrbQKHiuHCczeBD+vFXo9lrgxYviaAG:b/Zt2+5sX2nerKJdkeiuHC5+tar3iq
TLSH 6B04BF6BB450D072C4A722716A98B772A2FF8D3452398C87E3E80C6939755E2B32D747
Reporter @tildedennis
Tags:kins vmzeus


Twitter
@tildedennis
kins version 1.0.0.4

Intelligence


File Origin
# of uploads :
1
# of downloads :
19
Origin country :
FR FR
Mail intelligence
No data
Vendor Threat Intelligence
Result
Verdict:
Malware
Maliciousness:

Behaviour
Unauthorized injection to a recently created process
Creating a window
Connection attempt to an infection source
Result
Threat name:
Unknown
Detection:
malicious
Classification:
n/a
Score:
60 / 100
Behaviour
Behavior Graph:
Threat name:
Win32.Trojan.Zbot
Status:
Malicious
First seen:
2014-02-09 13:06:00 UTC
AV detection:
28 of 29 (96.55%)
Threat level
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Threat name:
Unknown
Score:
1.00

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments