MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cf0c7af64ac3fe68335149f081ba815c3204240ac04fe4acf3fbf6649d67613d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: cf0c7af64ac3fe68335149f081ba815c3204240ac04fe4acf3fbf6649d67613d
SHA3-384 hash: 236d654cc65514f866d3927d0afd9b4975385b773e8cd82e6e58cfe4280f769bcfc6c9a24858ba1fe3ac30a37a63116c
SHA1 hash: 37c4eb4d8c63359b10676e1de708d857497a2657
MD5 hash: 03bfe1314b066347fa466711116d295f
humanhash: friend-eleven-three-eighteen
File name:SecuriteInfo.com.Trojan.GenericKD.43046855.12126.23581
Download: download sample
File size:10'752 bytes
First seen:2020-05-15 20:31:01 UTC
Last seen:2020-05-15 21:29:20 UTC
File type:Executable exe
MIME type:application/x-dosexec
imphash f34d5f2d4577ed6d9ceec516c1f5a744 (48'749 x AgentTesla, 19'653 x Formbook, 12'246 x SnakeKeylogger)
ssdeep 192:8kXJ5hDms81Typ7GnOLiLJXRZVfjf+yG6eWav65pIA1nN0rCj94/:Xxb6OLiLxRjmPD4WC54
TLSH C9221800EBD9C9BADAAF8B3054F7034056B895883517CF8B2DDC649A5A23781DD83FE0
Reporter SecuriteInfoCom

Intelligence

File Origin
# of uploads :
2
# of downloads :
77
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.GenericKD.43046855.12126.23581.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.Clipbanker
Create hunting rule
Status:
Malicious
First seen:
2020-04-26 03:06:18 UTC
File Type:
PE (.Net Exe)
Extracted files:
1
AV detection:
22 of 30 (73.33%)
Threat level:
  5/5
Verdict:
malicious
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Link:
https://tria.ge/reports/201109-eps8cr8h6a/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Executable exe cf0c7af64ac3fe68335149f081ba815c3204240ac04fe4acf3fbf6649d67613d

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/363260/
  
Delivery method
Distributed via web download

Comments