MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e3cbe7b726ca503ccfd5b9080bb69d666d0cd23926e6ee852d5095c7d047ebc9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments

SHA256 hash: e3cbe7b726ca503ccfd5b9080bb69d666d0cd23926e6ee852d5095c7d047ebc9
SHA3-384 hash: fb7d4c025c1ab3ab3f23e199d0c00bd965e25336428919b3e8111e710453b39113850c8b65333c11dd008650a9783a28
SHA1 hash: c3c1a96708c30db642baf0fc91321f354e8c4b6a
MD5 hash: 45cd6084cb05522e837749a79ca8f0ec
humanhash: wisconsin-victor-carolina-nevada
File name:45cd6084cb05522e837749a79ca8f0ec.exe
Download: download sample
File size:610'816 bytes
First seen:2020-07-01 07:58:09 UTC
Last seen:2020-07-01 08:57:42 UTC
File type:Executable exe
MIME type:application/x-dosexec
imphash 466a455e178bcddfd1b303af8dc23e0a
ssdeep 12288:FvLkHdYMgmGkwnvn1oELXMGthN/355GPxrH1fZvBStF3G0qL+:ZL3MgmGXnPKaR3tfyrHpFBN0qL+
TLSH 7BD4122237C1C071E02764B19914F6B06F7F78B29665A1D337941B7FAE32AE39E29301
Reporter abuse_ch
Tags:exe

Intelligence


File Origin
# of uploads :
2
# of downloads :
78
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
Win32.Trojan.DanaBot
Status:
Malicious
First seen:
2020-07-01 08:00:07 UTC
AV detection:
25 of 29 (86.21%)
Threat level:
  5/5
Verdict:
unknown
Result
Malware family:
n/a
Score:
  6/10
Tags:
n/a
Behaviour
Checks processor information in registry
Legitimate hosting services abused for malware hosting/C2
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Executable exe e3cbe7b726ca503ccfd5b9080bb69d666d0cd23926e6ee852d5095c7d047ebc9

(this sample)

  
Delivery method
Distributed via web download

Comments