MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 eccbfb00cfe9e3b006628b000dd453f8f63eb7ebdf96173e7637cfc131719cce. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments

SHA256 hash: eccbfb00cfe9e3b006628b000dd453f8f63eb7ebdf96173e7637cfc131719cce
SHA3-384 hash: 9180e18c892dbbb06f7cccdad527eb1dfb98a1662fbdc6de46679a70a9a380996d74e6599957a44970a3e74c2a2701e8
SHA1 hash: f0b9da9b0226363b454ecdbf3fe464a518c98c96
MD5 hash: 2a9f7810f74b27574b84cf6de8d07cef
humanhash: oven-nitrogen-white-high
File name:2a9f7810f74b27574b84cf6de8d07cef.exe
Download: download sample
File size:6'027'906 bytes
First seen:2022-02-23 12:29:04 UTC
Last seen:2022-02-23 15:08:45 UTC
File type:Executable exe
MIME type:application/x-dosexec
ssdeep 98304:D+hoUAA6mt/cOkw09D1VxIFCeG3lEGxjRP/ody7mZoqUfJY2P6oPZw4IVX2:ihlAA7t/chZVqCeG1EGF/ody7+nmv6EX
TLSH T1E05633C1A5C09B363C6DDBDD4B2C55B68D1AD9FA6186EC4A9C713B40AEC6EF04244FC4
Reporter abuse_ch
Tags:exe

Intelligence


File Origin
# of uploads :
2
# of downloads :
182
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
Malware
Maliciousness:
Verdict:
Likely Malicious
Threat level:
  7.5/10
Confidence:
100%
Tags:
overlay packed
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Result
Threat name:
Unknown
Detection:
malicious
Classification:
n/a
Score:
48 / 100
Signature
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
Threat name:
ByteCode-MSIL.Trojan.Generic
Status:
Suspicious
First seen:
2022-02-23 12:30:18 UTC
File Type:
PE (Exe)
AV detection:
13 of 28 (46.43%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Unpacked files
SH256 hash:
eccbfb00cfe9e3b006628b000dd453f8f63eb7ebdf96173e7637cfc131719cce
MD5 hash:
2a9f7810f74b27574b84cf6de8d07cef
SHA1 hash:
f0b9da9b0226363b454ecdbf3fe464a518c98c96
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Executable exe eccbfb00cfe9e3b006628b000dd453f8f63eb7ebdf96173e7637cfc131719cce

(this sample)

  
Delivery method
Distributed via web download

Comments