MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ccb405bbdfb8da155fae40dbcc5dc5ea45340a7eea4ec19c782cd6748b800446. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: ccb405bbdfb8da155fae40dbcc5dc5ea45340a7eea4ec19c782cd6748b800446
SHA3-384 hash: b6884c16023140d54834a6ce7b411d4e2d4384a329185c84f76ade6ccdf1081809eae211e9f7a3535707e07451a98ae9
SHA1 hash: 790f55b22d59b42438fca65295188d07e3084351
MD5 hash: de12721ee2a7736eb78f05605f55a52b
humanhash: jupiter-steak-yankee-salami
File name:a94d388c85263275e84a7ffda9f227ce
Download: download sample
File size:174'424 bytes
First seen:2020-11-17 15:04:50 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 74ecdc2559500bd8aa96fc2768a4632c
ssdeep 3072:EANH2ZsYEF2yKx5G3xW9VE5oJXZV2JcVDz6ohAp8RFcAJYvQd2wNGWt:IZsYu2yK3GBvYDuoPR2LwN7
Threatray 3 similar samples on MalwareBazaar
TLSH 2C04F102BAA699F6D41B0B750C2188FCA274BC904D7455277EE8734FACB3E641D1D36E
Reporter seifreed

Intelligence

File Origin
# of uploads :
1
# of downloads :
63
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Win.Worm.Sytro-7108652-0
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a file in the Windows subdirectories
Creating a file in the Windows directory
Sending a UDP request
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/ccb405bbdfb8da155fae40dbcc5dc5ea45340a7eea4ec19c782cd6748b800446/
Threat name:
Win32.Worm.Soltern
Create hunting rule
Status:
Malicious
First seen:
2020-11-17 15:16:23 UTC
AV detection:
25 of 29 (86.21%)
Threat level:
  5/5
Verdict:
unknown
Similar samples:
1d05bca3f90a1febaa9186cd935fab3caf4d2201e3ce25af7a986eb4a5d50c3a
f2975e77f073b63d372176c727a2f6eeb7ada8c200c37a6e3fe913ab2703c2f3
fdc49fe7399295c60c73482ab79076648716a91300aab604fb251916c2bac250
Result
Malware family:
n/a
Score:
  4/10
Tags:
n/a
Link:
https://tria.ge/reports/201117-4esapqpmbj/
Behaviour
Drops file in Windows directory
Unpacked files
SH256 hash:
ccb405bbdfb8da155fae40dbcc5dc5ea45340a7eea4ec19c782cd6748b800446
MD5 hash:
de12721ee2a7736eb78f05605f55a52b
SHA1 hash:
790f55b22d59b42438fca65295188d07e3084351
Link:
https://www.unpac.me/results/287251c7-5cf2-4e23-9766-87d4fb908fd6/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments