MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 bf1f202c341d30a881c7a6ae482009d8fa441ae6cc6f76ea84c5c9a051845114. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: bf1f202c341d30a881c7a6ae482009d8fa441ae6cc6f76ea84c5c9a051845114
SHA3-384 hash: 5ad4ab4e163d87959612bef6838db6cd1a37cb577b4dbfabcb1a905b154757398ab32ff90a568d295a7d859f297274ad
SHA1 hash: 28cc1e388f146df31849dfd3397ba34c65eefe52
MD5 hash: a839d899890e982515ba69e18e811e60
humanhash: butter-winter-louisiana-red
File name:3d12d36ee20717c8762f1a11dc0c4e59
Download: download sample
File size:1'382'566 bytes
First seen:2020-11-17 12:19:16 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash ccc0e829fe1206cd39d147ca374725d4
ssdeep 24576:Or+DWgXcxixXVjJ1qDou4Nhe3hQ3rufuQseW0pUVAmKr/1GSeR/kHKDP:O+DWgNxl2DozNnqfuQtW0pUrKr1GSK8k
Threatray 4 similar samples on MalwareBazaar
TLSH 0E552311F6C2D0B3E4E105315DBD2A67F038EE393B35A18EFB149E1A9DB4251B70269B
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
58
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.RarSfx-1
Create hunting rule

PUA.Win.Packer.RarSfxModificat-1
Create hunting rule

Result
Verdict:
Clean
Maliciousness:

Behaviour
Creating a window
Searching for the window
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/bf1f202c341d30a881c7a6ae482009d8fa441ae6cc6f76ea84c5c9a051845114/
Threat name:
Win32.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2020-11-17 12:24:14 UTC
AV detection:
8 of 29 (27.59%)
Threat level:
  5/5
Verdict:
unknown
Similar samples:
537d9f5f656e79bb8f29f8d609996db7a7d73cbbaabce59079f5a23ca32ca427
582e6c2f0efae023abdac592f802ff5330b95eb4f66cdcad52f73b04e67cad57
a415a8e3922c0026ce33f3663d90894e209ef6dea4e30de47018cdd58a6b2fbc
c1a8e9725d32108de162cb120f16929a8c2d91a002e9df8c880a949806cd417d
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Link:
https://tria.ge/reports/201117-jyeck4p4l6/
Behaviour
Modifies Internet Explorer settings
Suspicious behavior: GetForegroundWindowSpam
Suspicious use of SetWindowsHookEx
Unpacked files
SH256 hash:
bf1f202c341d30a881c7a6ae482009d8fa441ae6cc6f76ea84c5c9a051845114
MD5 hash:
a839d899890e982515ba69e18e811e60
SHA1 hash:
28cc1e388f146df31849dfd3397ba34c65eefe52
Link:
https://www.unpac.me/results/78058d07-4ef8-4674-acdd-0080743f106d/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments