MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d474cd61a813c0f9cadabd4a34e8cd6503a04a7f213b6c414b385e8264365a91. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Intelligence File information Yara Comments

SHA256 hash: d474cd61a813c0f9cadabd4a34e8cd6503a04a7f213b6c414b385e8264365a91
SHA3-384 hash: 50be30996f109757c5b564d51949fb5d08acc55cd2d12e309a452a8c5015273742958159753cad0e89ed64c167b1276e
SHA1 hash: 830df23079314a8ee97356b8f8c8b175286470c6
MD5 hash: 0dcbb138c377fd2300c23d78a399172d
humanhash: missouri-moon-october-early
File name:unnamed 3_3.0.4.1.vir
Download: download sample
Signature n/a
File size:205'312 bytes
First seen:2020-07-19 19:28:26 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 85cf6d4b5143d9ed5102dffffb1f013c
ssdeep 3072:6sAYaZba6AOvvnID361tjzT4e7AenXz0Q1RNi4EBmRJ1Ggmzvxovq37y5DB29fum:6sMC6nv1t9800QVOmf/mLxovSeVBjm
TLSH 8814E096B154FBF1E413157C70A656B922BDCDF5CF042136C3E2ADA5B8B32A20A147E3
Reporter @tildedennis
Tags:unnamed 3


Twitter
@tildedennis
unnamed 3 version 3.0.4.1

Intelligence


File Origin
# of uploads :
1
# of downloads :
19
Origin country :
FR FR
Mail intelligence
No data
Vendor Threat Intelligence
Detection(s):
Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a window
Unauthorized injection to a recently created process
Connection attempt to an infection source
Threat name:
Win32.Trojan.Zbot
Status:
Malicious
First seen:
2012-08-17 07:26:00 UTC
AV detection:
23 of 25 (92.00%)
Threat level
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Threat name:
Unknown
Score:
1.00

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments