MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cd8e12cddfe71b89597b6621d538b63673c8a8a3bf47a0fa572961ca1280e5b5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: cd8e12cddfe71b89597b6621d538b63673c8a8a3bf47a0fa572961ca1280e5b5
SHA3-384 hash: 2638bcfa2139a74e777fac84dde95c76c049baa21f431b08ea8554e38da3619171526a865d4997b9dbcfb4b8540f0525
SHA1 hash: 3b6ceb5b51a5eba842da5bef99b748c91ec2ef9f
MD5 hash: 8fa9a4c7b3d4c1778a15bdf303d3665f
humanhash: early-arizona-batman-blossom
File name:cd8e12cddfe71b89597b6621d538b63673c8a8a3bf47a0fa572961ca1280e5b5
Download: download sample
File size:3'334'144 bytes
First seen:2022-11-08 03:09:29 UTC
Last seen:Never
File type: iso
MIME type:application/x-iso9660-image
ssdeep 98304:1cI2/Bb2r1Xk7rB2QMnpnzO39Plbu/KAALVX28f7AMQx9i:zCb2r1Xk7rB2QMnpnzO395AuVO
TLSH T15DF58D49FA8BA4F1EE570971858BE37F5721A901C421DEB2EF58BE8AFD73B221115310
TrID 99.4% (.NULL) null bytes (2048000/1)
0.2% (.ISO) ISO 9660 CD image (5100/59/2)
0.2% (.ATN) Photoshop Action (5007/6/1)
0.0% (.BIN/MACBIN) MacBinary 1 (1033/5)
0.0% (.ABR) Adobe PhotoShop Brush (1002/3)
Reporter vxunderground
Tags:iso

Intelligence

File Origin
# of uploads :
1
# of downloads :
101
Origin country :
US US
File Archive Information

This file archive contains 2 file(s), sorted by their relevance:

File name:Amazon-KiTTY.exe
File size:3'279'872 bytes
SHA256 hash: 6af9af8aa0d8d4416c75e0e3f7a20dfe8af345fb5c5a82d79e004a54f1b670dc
MD5 hash: ebd0e1c2e3ee5f3a7e180ff07e697987
MIME type:application/x-dosexec
File name:Readme.txt
File size:57 bytes
SHA256 hash: 29293f6f7037de12936f92800511136b244cf624a51b15198bc6bbeb2a36715a
MD5 hash: 15d8d44df7cd27de5f6eb8295ac84b6e
MIME type:text/plain
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.GenericKD.62359909.9625.14536.UNOFFICIAL
Create hunting rule

Verdict:
No Threat
Threat level:
  10/10
Confidence:
100%
Link:
https://www.filescan.io/uploads/6369c88e38db7c2a0385d8b8/reports/31a9f13a-5968-493e-bd34-b888c2c9a663/overview
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/cd8e12cddfe71b89597b6621d538b63673c8a8a3bf47a0fa572961ca1280e5b5/
Threat name:
Win32.Trojan.ZetaNile
Create hunting rule
Status:
Malicious
First seen:
2022-09-16 06:34:26 UTC
File Type:
Binary (Archive)
Extracted files:
274
AV detection:
15 of 42 (35.71%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=zwhbfto744nyswl3myq5kofwgzz4rkfdx5d2b6sxffq4ueua4w2q._file
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Link:
https://tria.ge/reports/221108-krldzsgde3/
Behaviour
Suspicious behavior: GetForegroundWindowSpam
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/cd8e12cddfe71b89597b6621d538b63673c8a8a3bf47a0fa572961ca1280e5b5

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments