MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e4492142e62dce45138b0f0c6c93032c02c2c1a2b413ad6d1c8c1d77c803f8c3. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: e4492142e62dce45138b0f0c6c93032c02c2c1a2b413ad6d1c8c1d77c803f8c3
SHA3-384 hash: cc791cc06cb2df5d6cf54d5ff8f2e236970f8387a216e4ec301d42fe43b52d14ac391e1b7ce50dd79a86d7009f8b8613
SHA1 hash: 4ae3ed6c1ab2fe41daf6f650a54dae63684d2064
MD5 hash: 63c4ff0505b79c98ccc86ce2ec55900c
humanhash: missouri-football-shade-artist
File name:e4492142e62dce45138b0f0c6c93032c02c2c1a2b413ad6d1c8c1d77c803f8c3
Download: download sample
File size:9'970 bytes
First seen:2020-06-09 17:34:39 UTC
Last seen:Never
File type:unknown
MIME type:text/plain
ssdeep 96:Xof7SwSFIMGBCMMD9f39CipxUFifCGcXJsBh+8ZhTYAlfAfsWVV2yCdQs98YffGQ:XCWrJMM1pxUcRcXJsBhRhTzlfea9z3GQ
TLSH CC22518C7C83A059A6B12A06DF0F954CEFE666531A19C350B4BCEC847F3192851BDEED
Reporter JAMESWT_WT

Intelligence

File Origin
# of uploads :
1
# of downloads :
62
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Win.Malware.Agent-7792000-0
Create hunting rule

Sanesecurity.Malware.25834.JsHeur.UNOFFICIAL
Create hunting rule

Porcupine.Malware.36555.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25779.JsHeur.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Script-JS.Trojan.Ursnif
Create hunting rule
Status:
Malicious
First seen:
2020-05-08 09:58:19 UTC
File Type:
Text (JavaScript)
AV detection:
17 of 31 (54.84%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments