MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f9ddae03124a6ced3b29b6f6e40c990b0f616fc78140bba1afa8b9e3891b956c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



ShinoLocker


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments

SHA256 hash: f9ddae03124a6ced3b29b6f6e40c990b0f616fc78140bba1afa8b9e3891b956c
SHA3-384 hash: 1d7345553496ac7059e18851f37a29bdf1db22a47b8d76dbd846bccab62b5d3a30561b4a9cf006af4498bb2eedc682bb
SHA1 hash: 58dc3e40102e199b6dd63074340b4941d8697e48
MD5 hash: e777bdceba9dadc27256007af2010bc9
humanhash: friend-cola-butter-early
File name:index.hta
Download: download sample
Signature ShinoLocker
File size:1'572 bytes
First seen:2021-07-24 09:49:10 UTC
Last seen:Never
File type:HTML Application (hta) hta
MIME type:text/html
ssdeep 48:b/y04uLZMaRZ5Np7GqaPBN4XuuVBzApGru:bK1aFnoqa/EXztu
TLSH T1B331F1A3952FC560DDEB5345B130A612A472E153943C9C25F3CC0E84DBE63A42365AB3
Reporter JAMESWT_WT
Tags:15.222.66.186 hta ShinoLocker

Intelligence


File Origin
# of uploads :
1
# of downloads :
190
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
Malicious
File Type:
HTA File - Malicious
Payload URLs
URL
File name
http://15.222.66.186/r.txt
HTA File
Result
Verdict:
SUSPICIOUS
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments