MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e7f5353766d8d7034bc6d0d074e471b00cdc6bc2c8e0c7620a6dfc3cf3588572. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	e7f5353766d8d7034bc6d0d074e471b00cdc6bc2c8e0c7620a6dfc3cf3588572
SHA3-384 hash:	686eb7ecc499d0ecdec3a44805bc4beade24e50d3bfa56bd226e778b1bd97a0e33602b9a8f328f96b7c1ba2bfcb1bc5e
SHA1 hash:	decadf0d07331c3cb221663e84b8a6d541414a96
MD5 hash:	40b75d93d5cd7f886edf0731a8ef4974
humanhash:	lion-tennis-white-xray
File name:	aes.pyc_Decompiled.py
Download:	download sample
Signature	BlankGrabber Alert Create hunting rule
File size:	28'989 bytes
First seen:	2024-07-26 12:59:51 UTC
Last seen:	Never
File type:
MIME type:	text/x-script.python
ssdeep	768:O4pEhkq0LUvpxRsoL8j6mbWkXvaaDvVMDLoxCv7SJOygAyjCL:O4pekq0Gdsow/bWkfaUMgAOJDnL
TLSH	T1C3D22AE5196B4DE5A383C4EB10C5E813AB39B527071C975977FDB7C4AF8A82842E6CC0
Reporter	v9lu
Tags:	BlankGrabber py

v9lu

Decompiled aes.py (BlankGrabber-modified version of the original pyaes library file aes.py, with the AESModeOfOperationGCM method added)

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

89

Origin country :

FR

Vendor Threat Intelligence

CyberFortress Clean

Verdict:

Clean

Score:

70%

Link:

https://cyber-fortress.com/docs/result/index.php?id=66a4da033ee5253b89e5cfad

Tags:

n/a

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  10/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/66a39ddc3ba51bb345a3c0ad/reports/d9303514-aa03-46f5-b6e0-a3befde12a7b/overview

InQuest MALICIOUS

Result

Verdict:

MALICIOUS

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

SCRIPT

Link:

https://malprob.io/report/e7f5353766d8d7034bc6d0d074e471b00cdc6bc2c8e0c7620a6dfc3cf3588572

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/e7f5353766d8d7034bc6d0d074e471b00cdc6bc2c8e0c7620a6dfc3cf3588572/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=472tkn3g3dlqgs6g2dihjzdrwagny26czdqmoyqknx6dz42yqvza._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/e7f5353766d8d7034bc6d0d074e471b00cdc6bc2c8e0c7620a6dfc3cf3588572