MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 c2ef46a1b6292f28c0caf08013577e8559c4b0a71bf6fc058968061a3d71ede2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 5
| SHA256 hash: | c2ef46a1b6292f28c0caf08013577e8559c4b0a71bf6fc058968061a3d71ede2 |
|---|---|
| SHA3-384 hash: | 76baa7c054630daafbe15e1c81d6834e842ca1a8730086c95937714b4d33771ed8622274bcac9b88d104e2659b00ee2e |
| SHA1 hash: | 4678e87a393fedeed58c2a151efef17e221b161f |
| MD5 hash: | d9c32681d65c18d9955f5db42154a0f3 |
| humanhash: | gee-sierra-north-sad |
| File name: | SecuriteInfo.com.Trojan.DnsChange.10846.3052.26773 |
| Download: | download sample |
| File size: | 38'400 bytes |
| First seen: | 2020-08-05 14:35:17 UTC |
| Last seen: | Never |
| File type: |  exe |
| MIME type: | application/x-dosexec |
| imphash | 7903fa9e19394d4ae30a6ee4d9f8af14 |
| ssdeep | 768:uBjqgvACIryYcS8s3AslF+1kcyIFRg7zP1rMIo:ZCYrP+1kRIFRuPRMIo |
| Threatray | 10 similar samples on MalwareBazaar |
| TLSH | 7203F1DD6B085818E1530FB060B7028B0B19ED14E5DDB3B9FE6B4663CCB1D02FD5A292 |
| Reporter |  SecuriteInfoCom |
Intelligence
File Origin
# of uploads :
1
# of downloads :
61
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Result
Verdict:
Malware
Maliciousness:
Behaviour
Running batch commands
Creating a process with a hidden window
Launching a process
Sending a UDP request
Sending an HTTP GET request to an infection source
Result
Threat name:
Unknown
Detection:
malicious
Classification:
troj.evad
Score:
56 / 100
Signature
Machine Learning detection for sample
Uses known network protocols on non-standard ports
Uses ping.exe to check the status of other devices and networks
Uses ping.exe to sleep
Behaviour
Behavior Graph:
Threat name:
Win32.Trojan.Mirai
Status:
Malicious
First seen:
2019-12-01 16:20:35 UTC
AV detection:
44 of 48 (91.67%)
Threat level:
5/5
Verdict:
suspicious
Similar samples:
Result
Malware family:
n/a
Score:
8/10
Tags:
upx
Behaviour
UPX packed file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
exe c2ef46a1b6292f28c0caf08013577e8559c4b0a71bf6fc058968061a3d71ede2
(this sample)
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.