MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c5c5e59bb18bad1427714d0007b676e658d8e08faf5a0632ed88912f5816d525. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



GoldenSpy


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments

SHA256 hash: c5c5e59bb18bad1427714d0007b676e658d8e08faf5a0632ed88912f5816d525
SHA3-384 hash: a24562eb468f4727d4302964da543ee94cbb061f78b81cd7eb5d2838b0f4fd0fa197f76e2a89ec29aae50b80ec0fdb0c
SHA1 hash: 5c2064f8fa1dd0268e50a1c33f14a30694640d36
MD5 hash: 4fc56dd3b3875cda5708451f756426b3
humanhash: yellow-edward-cup-ink
File name:GoldenSpy (14)
Download: download sample
Signature GoldenSpy
File size:4'521'608 bytes
First seen:2020-07-02 14:26:36 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash abb85e8b889dab3b36aa68b03047e6e6 (13 x GoldenSpy)
ssdeep 98304:1q1UMPWLT3NroFkX7swTzHla0q7H6KW14uSvAPPOw4SFRN3Im6scW:bMPWLZEFs7fTzF4FWkw4SR4gX
Threatray 19 similar samples on MalwareBazaar
TLSH 6B2633A1D7C1C4ECFD9B3DB8CA79B726D361153AAA4CC4D26360738ABE35C0514E6316
Reporter JAMESWT_WT
Tags:GoldenSpy

Intelligence


File Origin
# of uploads :
1
# of downloads :
115
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
Win32.Backdoor.GoldenSpy
Status:
Malicious
First seen:
2020-04-17 06:32:57 UTC
File Type:
PE (Exe)
Extracted files:
834
AV detection:
36 of 48 (75.00%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Behaviour
NSIS installer
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

GoldenSpy

Executable exe c5c5e59bb18bad1427714d0007b676e658d8e08faf5a0632ed88912f5816d525

(this sample)

  
Delivery method
Distributed via web download

Comments