MALICIOUS — 0a55782971135c2299e5aca022a22b0256afa3f7e3b73c4b365c32780a91ccf2

MALICIOUS — 0a55782971135c2299e5aca022a22b0256afa3f7e3b73c4b365c32780a91ccf2 is a pe sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (89/100), attributed to the Unruy family. 5 of 52 detection engines flagged it.

Identification

• SHA-256: 0a55782971135c2299e5aca022a22b0256afa3f7e3b73c4b365c32780a91ccf2
• SHA-1: 2c64a14fecec8bbf2b758eea9822d40bcfad7ad7
• MD5: ea9a20a3c6101d7e4a0d8d4290ddfadd
• imphash: 799648032be17bf6d9bce0159e2ededa
• ssdeep: 6144:sm5UsluzKOkwWcSxJVuftLM9htvs7V2GU8EI8V1Oi3dzP2Td3Ti0/tJMtkzjSKX/:smqslOKHwSAtS8UVyv5KZFOMdzkP
• TLSH: T1384BB0221A1A7A34D72F3F256828E70FB6039E3FA1ED312112505B1F761815FE7D522A
• Submitted as: 0a55782971135c2299e5aca022a22b0256afa3f7e3b73c4b365c32780a91ccf2
• File type: pe · Size: 472422 bytes
• Verdict: malicious (89/100) · Family: Unruy

Detections (5 of 52 engines)

• ClamAV (daily): Win.Downloader.Unruy-6988793-0
• YARA: JPCERT/CC: JPCERT_HUILoader_PlugX_SideLoad
• Microsoft Defender: TrojanDownloader:Win32/Unruy!pz
• Emsisoft (Emergency Kit): Gen:Variant.Barys.458891
• Kaspersky (KVRT): Trojan-Clicker.Win32.Cycler.amiy

Why this verdict

The malicious score of 89/100 is the fusion of 2 weighted signals:

• ClamAV (daily) flagged Win.Downloader.Unruy-6988793-0 (rule Win.Downloader.Unruy-6988793-0) - engine signal, weight 0.90, confidence 0.95
• YARA: JPCERT/CC flagged JPCERT_HUILoader_PlugX_SideLoad (rule JPCERT_HUILoader_PlugX_SideLoad) - engine signal, weight 0.35, confidence 0.70

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

More Unruy samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report