MALICIOUS — 1b598a6732c0ac8c07d8fa6a748206388d9340fe61126925ddd2aba7af5a3a1f

MALICIOUS — 1b598a6732c0ac8c07d8fa6a748206388d9340fe61126925ddd2aba7af5a3a1f is a pe sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (87/100), attributed to the VBGeneric family. 3 of 55 detection engines flagged it, exhibiting 1 ATT&CK technique.

Identification

• SHA-256: 1b598a6732c0ac8c07d8fa6a748206388d9340fe61126925ddd2aba7af5a3a1f
• SHA-1: 395425e31f18b4c05135abe84765ec1bd2d2b0d4
• MD5: 645e8aca9cd6bd8400869d965e4e7db1
• imphash: fb3d0a9cf63dfa8698555596b6c0c5e8
• ssdeep: 384:jYxWwue/4youZfWkXiWgEiSZexdiHsd2E0S8NrjpWKV:jYx+6dWailEl0iMk6ErkA
• TLSH: T1CF3FC7EE0F32DE80C9B1CE83F4C91A1D2053396037A9514DA756959BA7F38A7683C42D
• Submitted as: 1b598a6732c0ac8c07d8fa6a748206388d9340fe61126925ddd2aba7af5a3a1f
• File type: pe · Size: 164117 bytes
• Verdict: malicious (87/100) · Family: VBGeneric

Detections (3 of 55 engines)

• ClamAV (daily): Win.Trojan.VBGeneric-6735817-0
• Microsoft Defender: Trojan:Win32/Vindor!pz
• Kaspersky (KVRT): UDS:Trojan-Dropper.Win32.VB.gen

MITRE ATT&CK

• T1057

Why this verdict

The malicious score of 87/100 is the fusion of 2 weighted signals:

• ClamAV (daily) flagged Win.Trojan.VBGeneric-6735817-0 (rule Win.Trojan.VBGeneric-6735817-0) - engine signal, weight 0.90, confidence 0.95
• enumerate processes (rule enumerate processes) - capa signal, weight 0.20, confidence 0.60

Dynamic analysis (windows)

0 behavior events · 0 ATT&CK techniques · 0 dropped files.

Runtime network

• none

More VBGeneric samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report