MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c1a8e9725d32108de162cb120f16929a8c2d91a002e9df8c880a949806cd417d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: c1a8e9725d32108de162cb120f16929a8c2d91a002e9df8c880a949806cd417d
SHA3-384 hash: 42d56a2118040733892f8b9f609abcaf6cd9938d1be3b5e4542ef01d9af64022a8fc2e6870be4d63c5cde3f6f879f779
SHA1 hash: 7d06af6fb6b55be3314040248bf95adb730ebf0f
MD5 hash: 15ddbc9a25c44f22a17a37df46796b4b
humanhash: ack-football-cola-lima
File name:773926587c3141376be2f5c36456fd60
Download: download sample
File size:285'163 bytes
First seen:2020-11-17 11:53:42 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 87b324a67e18fb2e1d12308b06fa8d4f
ssdeep 6144:pwdXu/iW4eBIb735V0hglRx7AJgxa3fEvzj2wrntIlWpxFXJTPJuy8P86:pee6Wch7Ar3sv3AWj5JJwT
Threatray 2 similar samples on MalwareBazaar
TLSH 4154F202BA9680F3E4408A70D46DB37ED178FE1A6FB5E2EFC7525C0E59B07116809B67
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
56
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Packer.RarSfx-1
Create hunting rule

PUA.Win.Packer.RarSfxModificat-1
Create hunting rule

Result
Verdict:
Clean
Maliciousness:

Behaviour
Creating a window
Searching for the window
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/c1a8e9725d32108de162cb120f16929a8c2d91a002e9df8c880a949806cd417d/
Threat name:
Win32.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2020-11-17 11:56:56 UTC
AV detection:
16 of 28 (57.14%)
Threat level:
  5/5
Verdict:
unknown
Similar samples:
537d9f5f656e79bb8f29f8d609996db7a7d73cbbaabce59079f5a23ca32ca427
bf1f202c341d30a881c7a6ae482009d8fa441ae6cc6f76ea84c5c9a051845114
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Link:
https://tria.ge/reports/201117-zffgypk5y2/
Behaviour
Modifies Internet Explorer settings
Suspicious behavior: GetForegroundWindowSpam
Suspicious use of SetWindowsHookEx
Unpacked files
SH256 hash:
c1a8e9725d32108de162cb120f16929a8c2d91a002e9df8c880a949806cd417d
MD5 hash:
15ddbc9a25c44f22a17a37df46796b4b
SHA1 hash:
7d06af6fb6b55be3314040248bf95adb730ebf0f
Link:
https://www.unpac.me/results/269159cf-9a98-4183-9b74-f168ac062ce7/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments