MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 be98190a6bf8bc5b3781fd7e68b8d57d5a0bc2b9c66a7106dd32495b44a9154d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: be98190a6bf8bc5b3781fd7e68b8d57d5a0bc2b9c66a7106dd32495b44a9154d
SHA3-384 hash: dde7081731e1a76cee9efbba3e911bfc1b9ecf2d9c12cdee13eff8836929b6396b4f950d1e1897f8ca42d5ef4105def0
SHA1 hash: ab2aa68f89724a50bbe90bc02b16c4e6aee32d95
MD5 hash: 863dd698d2e9d998180c2a6d7da77677
humanhash: failed-fourteen-washington-fix
File name:ENRCN.exe
Download: download sample
File size:844'288 bytes
First seen:2020-05-27 13:25:13 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash c00b6ba7dbbc6abee9ace3a65a49ba24 (6 x Renamer, 1 x Worm.Ramnit)
ssdeep 12288:OwCBtLC+EptUpQ9SeSChq3YvxFBSSRMT8PTp4FhozEF888888888888W8888888J:eNzCtUpQ9WWPBSSRMTEpMN9
Threatray 7 similar samples on MalwareBazaar
TLSH 57055B1AB2D7143BC03706BD492B52645C3B7E202A9658565EFCBF4C0F392A33D36E96
Reporter James_inthe_box
Tags:exe

Intelligence

File Origin
# of uploads :
1
# of downloads :
75
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Malware.Speedingupmypc-6718419-0
Create hunting rule

Win.Virus.Tainp-1
Create hunting rule

Win.Malware.Cbgz-6743174-0
Create hunting rule

Win.Malware.Auopnspi-6887872-0
Create hunting rule

Win.Trojan.Agent-1372183
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Renamer
Create hunting rule
Status:
Malicious
First seen:
2020-04-24 16:50:05 UTC
File Type:
PE (Exe)
Extracted files:
19
AV detection:
30 of 30 (100.00%)
Threat level:
  5/5
Verdict:
malicious
Similar samples:
4447dee4424f298d64e15a4ba543090afe27afc9b839cb186ce4ddad3ca6e6b7
686eca2834dd77a34fa608e4cd4507c6ac57613a41a705ad848b81fe8dbfcec4
68a9e2865afa7d982775ae96d054e37d6931f5cd79ff45841526bba1b6e285ae
93a1f0fa0637acd096c86ec4d7d3c6f73f689bf41f3cd16b5e5bcce48dcdc540
ab703a3bc7d05c62bcc127febfd82a7903a47f45664b5195ada070eb748d5b25
c885dc67b25339b6b1567e5b6e541eca318a61736d9c66569ad8241b9f10d87b
e78fc612cad822b8532351787c4da091dd4ddbfc499d3563050b21c6ba5c0fef
Result
Malware family:
n/a
Score:
  7/10
Tags:
n/a
Link:
https://tria.ge/reports/201109-a5yvbn9sbx/
Behaviour
Drops file in Program Files directory
Drops file in Windows directory
Drops autorun.inf file
JavaScript code in executable
Drops startup file
Loads dropped DLL
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments