MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 dcb232409c799f6ddfe4bc0566161c2d0b372db6095a0018e6059e34c2b79c61. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Lazarus


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: dcb232409c799f6ddfe4bc0566161c2d0b372db6095a0018e6059e34c2b79c61
SHA3-384 hash: 489623bf302a65601af21c692d348c16b2642a5a4bd3ca6ef978e7ad4e344623072551e63375ca92788033845bb77d13
SHA1 hash: e769a810389f931b748bbe80742c427126c063a4
MD5 hash: d620c699a5b1828aca699b5aee77e5e6
humanhash: asparagus-seventeen-vermont-september
File name:d620c699a5b1828aca699b5aee77e5e6
Download: download sample
Signature Lazarus
File size:33'312 bytes
First seen:2021-02-18 01:19:00 UTC
Last seen:Never
File type:php macho
MIME type:application/x-mach-binary
ssdeep 192:fHck6do21hhIymPTzTQxkqMd+K2uk7DLOJ4eL:fHcNqghDmPTzTE
TLSH C6E2A522BF4C299ED45C4234847B03C712A2F9416E29531B1185E1287FF5BE626D3B8B
Reporter c3rb3ru5d3d53c2
Tags:Lazarus

Intelligence


File Origin
# of uploads :
1
# of downloads :
144
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
MacOS.Trojan.NukeSped
Status:
Malicious
First seen:
2021-02-17 18:09:54 UTC
File Type:
MachO64 Little (Exe)
AV detection:
4 of 47 (8.51%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments