MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c350a262bcf25db5d0f53e51109f1b3b17be6b39bbe187e79fc532584122ed4e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 6


Intelligence 6 IOCs YARA 1 File information Comments
Add tag Delete this sample Report a False Positive

SHA256 hash: c350a262bcf25db5d0f53e51109f1b3b17be6b39bbe187e79fc532584122ed4e
SHA3-384 hash: 67b5374999cd47e2594e8d2371f63d55c42a197dede9fcc6e3bf4a460c8e2a6fc540103ea4b9abefc9413220fda9f63a
SHA1 hash: 01f94f866bc290b580fd60fa30a46d716dfeaec6
MD5 hash: dbea28eaff28d3c36167cda35ca81f80
humanhash: william-uncle-september-virginia
File name:c350a262bcf25db5d0f53e51109f1b3b17be6b39bbe187e79fc532584122ed4e
Download: download sample
Signature n/a
File size:193'024 bytes
First seen:2020-09-20 15:42:48 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 3cb4cc1237375f17d1aa30e9ae001a29
ssdeep 3072:G+q+61gWxS5E/vxahhP+VLiWwqpqNsNZpBpH4zoAVWxSBEWalxgmwVp26hLq:vq+6lxS5E3xoMuWwrcnpHDADBEWalxgm
Threatray 8 similar samples on MalwareBazaar
TLSH 6B141251C2121D25F1CE503329270EE5B21A7641F48ECB9F46EC8D6D79B3726BC89EA2
Reporter @tildedennis
Tags:uncategorized zeus


Twitter
@tildedennis
uncategorized zeus version 3.2.2.3

Intelligence

File Origin
# of uploads :
1
# of downloads :
121
Origin country :
FR FR
Mail intelligence
No data
Vendor Threat Intelligence
Detection:
n/a
Link:
https://www.capesandbox.com/analysis/63910/
Detection(s):
PUA.Win.Packer.Upx-4
Create hunting rule

SecuriteInfo.com.Win32.Heur.28998.32678.15846.UNOFFICIAL
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Launching the default Windows debugger (dwwin.exe)
Sending a UDP request
Result
Threat name:
Unknown
Detection:
malicious
Classification:
n/a
Score:
60 / 100
Link:
https://www.joesandbox.com/analysis/470898
Signature
Antivirus / Scanner detection for submitted sample
Machine Learning detection for sample
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
Download SVG
Detection:
n/a
Create hunting rule
Link:
https://mwdb.cert.pl/sample/c350a262bcf25db5d0f53e51109f1b3b17be6b39bbe187e79fc532584122ed4e/
Threat name:
Win32.Trojan.Zeus
Create hunting rule
Status:
Malicious
First seen:
2011-11-23 16:45:00 UTC
File Type:
PE (Exe)
Extracted files:
18
AV detection:
42 of 48 (87.50%)
Threat level:
  5/5
Verdict:
suspicious
Similar samples:
03de249179aca1995c6d814312d5c9085f3d8fe668f7601f6320afb2f8f98d18
4c850cfff31192c9f8439e0b9e4127d0b419c9909d2c85e7e99a5bb0115db3c9
4e49f5147939257640ba4990f520c9dbe355c83b73d9deadfc8505c4a09f931d
4fdaee1072210091799af73f630e0eb993a1d2d42005dc096d1422d9924f1ad5
7023401afba5b814cf592d063996f83c00903667bcf4aaf905fefcd79354fc2e
70e1d2fba60a7d20e531b09ff328fef21b82bb7e87d78a48f964d82c7dd2680f
94c9336a6e056520105481a9082e7e84c8a98a794a06b037c573bd9efc9df809
f0fd23c542d2a0ad3b6c049f8938a196b3835613686eeb79688c6379d3fe102e
Result
Malware family:
n/a
Score:
  8/10
Tags:
upx
Link:
https://tria.ge/reports/200920-wgb21ydl9x/
Behaviour
UPX packed file
AV coverage:
76.71%
AV detections:
56 / 73
Link:
https://www.virustotal.com/gui/file/c350a262bcf25db5d0f53e51109f1b3b17be6b39bbe187e79fc532584122ed4e/detection/f-c350a262bcf25db5d0f53e51109f1b3b17be6b39bbe187e79fc532584122ed4e-1582622255
Threat name:
Kazy
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/c350a262bcf25db5d0f53e51109f1b3b17be6b39bbe187e79fc532584122ed4e

YARA Signatures

MalareBazaar uses YARA rules from several public and non-public repositories, such as Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious proccess dumps they may create. Please note that only results from TLP:WHITE rules are being displayeyd.

Rule name:suspicious_packer_section
Create hunting rule
Author:@j0sm1
Description:The packer/protector section names/keywords
Reference:http://www.hexacorn.com/blog/2012/10/14/random-stats-from-1-2m-samples-pe-section-names/

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Link
https://zeusmuseum.com/uncategorized zeus/
Cape
Cape
https://www.capesandbox.com/analysis/63910/

Comments