MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d42c263c86ca45c6c1c3a7dff0e312ae91fb6db3626fac0c670f94da9249b5a2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Adware.Generic


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: d42c263c86ca45c6c1c3a7dff0e312ae91fb6db3626fac0c670f94da9249b5a2
SHA3-384 hash: 244562af8ce7b925c5d158632f918c83d786e24b2c5570874cab80da44a5a27474d7ce906b90433d7d1da4294f23faab
SHA1 hash: 62d3cfb21c94c7b49b4038f861afd4907434f9d6
MD5 hash: d416f0b8706002d9a0cbf00fca48af37
humanhash: crazy-stream-bluebird-vegan
File name:d42c263c86ca45c6c1c3a7dff0e312ae91fb6db3626fac0c670f94da9249b5a2
Download: download sample
Signature Adware.Generic
Create hunting rule
File size:655'094 bytes
First seen:2020-11-07 17:34:34 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 7c2c71dfce9a27650634dc8b1ca03bf0 (160 x Loki, 58 x Formbook, 55 x Adware.Generic)
ssdeep 12288:trgTAGugbu4mXR71wHHbbJrtFQHdoCQsLwx1LqMn89qrSJwfQ:0A0butB7u/dIHdoyG1LqorSSfQ
TLSH 49D423E77690C96BD4B922301634329D9FF1860626D15B9F73840EE4FE422A744BFF26
Reporter seifreed
Tags:Adware.Generic

Intelligence

File Origin
# of uploads :
1
# of downloads :
78
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Downloader.Soft32downloader-6691270-0
Create hunting rule

PUA.Win.Adware.Browserio-6725861-0
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a window
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/d42c263c86ca45c6c1c3a7dff0e312ae91fb6db3626fac0c670f94da9249b5a2/
Threat name:
Win32.Trojan.Tiggre
Create hunting rule
Status:
Malicious
First seen:
2020-11-07 17:43:05 UTC
AV detection:
19 of 29 (65.52%)
Threat level:
  5/5
Verdict:
unknown
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Link:
https://tria.ge/reports/201108-el9jw6948e/
Behaviour
Suspicious behavior: GetForegroundWindowSpam
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments