MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e49cd4e3394a954621fb820e36cc86b933538306fbda873cf2000a33fe1e8db1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	e49cd4e3394a954621fb820e36cc86b933538306fbda873cf2000a33fe1e8db1
SHA3-384 hash:	f9c31917d75498b0a1a7e233e7863dd8cab4e36e827f60bb5b53c5c4c0b901ea8906d0099a655538ce98a7f729999a6a
SHA1 hash:	933b14f0ef18bad1d7ddd82b2c012c3dc510d80a
MD5 hash:	c6e68eb8a3bcae30c16eb1fbaa75f2be
humanhash:	violet-moon-magazine-blossom
File name:	c2sock.js
Download:	download sample
Signature	LummaStealer Alert Create hunting rule
File size:	18'999 bytes
First seen:	2023-03-21 09:45:14 UTC
Last seen:	Never
File type:	js
MIME type:	application/octet-stream
ssdeep	384:BuxSDrAxSD3LjQuhGRiwsoaZUpfXXNPW+H3xTHhHcK99oFvasnXmwD:UxgrAxg3L8xRiwsoE2nHH3xTHEasXzD
TLSH	T13182AEBCE86CEC90DE91DAB51D21D3C41E56FB2445F934EB31543AA19CB340082A2EEF
Reporter	JAMESWT_WT
Tags:	js lumma LummaStealer pcworldgetin-net

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

235

Origin country :

IT

Vendor Threat Intelligence

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

comodo icedid qakbot

Link:

https://www.filescan.io/uploads/64197cdada1bbe29caf94ad9/reports/7c0e619d-9e34-4c47-864e-7e724e8827f1/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/e49cd4e3394a954621fb820e36cc86b933538306fbda873cf2000a33fe1e8db1

Joe Sandbox clean

Result

Threat name:

Unknown

Detection:

clean

Classification:

n/a

Score:

1 / 100

Link:

https://www.joesandbox.com/analysis/1198702

Behaviour

Behavior Graph:

n/a

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/e49cd4e3394a954621fb820e36cc86b933538306fbda873cf2000a33fe1e8db1/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=4sonjyzzjkkumip3qihdntegxezvhayg7pniophsaafdh7q6rwyq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

n/a

Link:

https://tria.ge/reports/230321-mqjj4sbg8y/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/e49cd4e3394a954621fb820e36cc86b933538306fbda873cf2000a33fe1e8db1