MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d51487c39f574ab460ee34644b5338fe97dba3869ca5b30766ef12e1919d5b56. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


ZLoader


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: d51487c39f574ab460ee34644b5338fe97dba3869ca5b30766ef12e1919d5b56
SHA3-384 hash: c2f8e34322fc641283ab78a3ee2e74b17a6dd39fd19bdc9f5655b93192ae08b3c231f5b66da6b49ff372c219f14bb0b1
SHA1 hash: e673649bf6b21e5e6b8ce9e805b479a0dd941492
MD5 hash: 122d47a87578a96e726a1867bb959d0a
humanhash: princess-ack-two-lithium
File name:BU6962_CSW87.vbs
Download: download sample
Signature ZLoader
Create hunting rule
File size:1'326'217 bytes
First seen:2020-04-09 12:20:35 UTC
Last seen:Never
File type:Visual Basic Script (vbs) vbs
MIME type:text/plain
ssdeep 6144:58D7RndbazTMA3QJwEpfjmGpmhY6zBkKUhlx/UyZDrtHurxUNsyBctRNBkT7Am:MoM+0CDqyWNBcJST8m
TLSH 305562C2307C65634983A64730658DCB3B5F96A9886C665FB983FFCBD7B73882431285
Reporter Racco42
Tags:dropper vbs

Intelligence

File Origin
# of uploads :
1
# of downloads :
332
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25834.JsHeur.UNOFFICIAL
Create hunting rule

Porcupine.Malware.36555.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Script-VBS.Trojan.Valyria
Create hunting rule
Status:
Malicious
First seen:
2020-04-09 12:35:39 UTC
File Type:
Text (VBS)
AV detection:
12 of 31 (38.71%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

ZLoader

Visual Basic Script (vbs) vbs d51487c39f574ab460ee34644b5338fe97dba3869ca5b30766ef12e1919d5b56

(this sample)

ZLoader

DLL dll 7af7f0a46e466b448270f959f4e1a3af964d22b609100536703e299d7618bf2d

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 7af7f0a46e466b448270f959f4e1a3af964d22b609100536703e299d7618bf2d

Comments