MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 dec66b4f3cf3475a91d972d4820cc6ccd75477075184bec61840d1b051d0e1cc. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments

SHA256 hash: dec66b4f3cf3475a91d972d4820cc6ccd75477075184bec61840d1b051d0e1cc
SHA3-384 hash: d5fcbe5c67945c961a3d1929ef9b8468474f502b35dfacf3ff57e3bc29c6515fe8e7fcc8f381de6609743049594cdef4
SHA1 hash: 02c6c43027f7f53d7e13aa788c53cbf4c3aba529
MD5 hash: ab68c8c417e434b6340d281dbc3e50dc
humanhash: video-jig-hot-muppet
File name:seminar0810.dll
Download: download sample
File size:118'784 bytes
First seen:2020-10-08 16:54:07 UTC
Last seen:2020-10-08 17:37:45 UTC
File type:Executable exe
MIME type:application/x-dosexec
ssdeep 1536:BhzE5piRCIbxU7tnv0rrIcbAGkGFnZWe3tEScTmnWyZAhWsrbTrs5ASCMKgH5SIz:U5pD6rFsiZWeCSc5yihl3saHMHkIz
Threatray 40 similar samples on MalwareBazaar
TLSH BAC33902FBA7E1A5D02AC53503E67132F8753C26D479FEEE875053565A24FB0A7AE320
Reporter James_inthe_box
Tags:dll

Intelligence


File Origin
# of uploads :
2
# of downloads :
117
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
Clean
Maliciousness:

Behaviour
Sending a UDP request
DNS request
Sending a custom TCP request
Result
Threat name:
Unknown
Detection:
malicious
Classification:
troj
Score:
52 / 100
Signature
Multi AV Scanner detection for submitted file
Tries to resolve many domain names, but no domain seems valid
Behaviour
Behavior Graph:
Threat name:
Win64.Trojan.Mansabo
Status:
Malicious
First seen:
2020-10-08 16:53:53 UTC
File Type:
PE+ (Exe)
AV detection:
20 of 29 (68.97%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Behaviour
Modifies system certificate store
Unpacked files
SH256 hash:
dec66b4f3cf3475a91d972d4820cc6ccd75477075184bec61840d1b051d0e1cc
MD5 hash:
ab68c8c417e434b6340d281dbc3e50dc
SHA1 hash:
02c6c43027f7f53d7e13aa788c53cbf4c3aba529
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments