MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 edc36f8ab61df8483a45ed5389fd65da034e6652f4b7e7bf7cd38a01e003e084. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments

SHA256 hash: edc36f8ab61df8483a45ed5389fd65da034e6652f4b7e7bf7cd38a01e003e084
SHA3-384 hash: 08478b0c169c8b5d5eddce0b8630f074e29d948891a6f0b212347ccf3d6cf856ca22e0271ca259de14fa8fe967e70200
SHA1 hash: a8aa057eabb2aeb7932197c36e5c2f61cd047666
MD5 hash: 7c48f435d61381b0ed789cdfd531aaed
humanhash: spaghetti-artist-illinois-oklahoma
File name:7c48f435d61381b0ed789cdfd531aaed.exe
Download: download sample
File size:610'304 bytes
First seen:2020-07-01 05:24:10 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 6739efd83d71232bc1758a1dfae953a1
ssdeep 12288:8EL2LHy369J+VoZAggbhE+pzf4inoTn7efoh0gvLHPiMV+HHmaqP:9L4y36T+V4A3hVznLoxqDqP
TLSH 3DD412033B42C432D46A3431AA0AF7F4667EBCB19565B29773D46B3EAE313D07E26254
Reporter abuse_ch
Tags:exe

Intelligence


File Origin
# of uploads :
1
# of downloads :
75
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
Win32.Trojan.DanaBot
Status:
Malicious
First seen:
2020-07-01 05:26:06 UTC
AV detection:
25 of 29 (86.21%)
Threat level:
  5/5
Verdict:
unknown
Result
Malware family:
n/a
Score:
  6/10
Tags:
n/a
Behaviour
Checks processor information in registry
Legitimate hosting services abused for malware hosting/C2
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Executable exe edc36f8ab61df8483a45ed5389fd65da034e6652f4b7e7bf7cd38a01e003e084

(this sample)

  
Delivery method
Distributed via web download

Comments