MALICIOUS — 1ccd748d2e0b0f58198fa065f0a6b3c7029ae93370c6904288b61a36902b8555

MALICIOUS — 1ccd748d2e0b0f58198fa065f0a6b3c7029ae93370c6904288b61a36902b8555 is a pe sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (96/100), attributed to the Cutwail family. 4 of 52 detection engines flagged it.

Identification

• SHA-256: 1ccd748d2e0b0f58198fa065f0a6b3c7029ae93370c6904288b61a36902b8555
• SHA-1: 6e0bd5f2848398cf2dcba35bbb2513853c2c764d
• MD5: 64beb9e6a4a6bb8a863e6bc964fc3322
• imphash: caed740047327835987440169debea21
• ssdeep: 384:KjftkKY5UNvonYnjLDHqQ48AAi+2Z7nygCS2umKrBhxQsCwbu2Yrlou+3otJ:KLtlNQolvAAU7yghk6RtCxVlouUo/
• TLSH: T15B2E6C8EA700859ECEDE432E223C340FB911B7ACD5275BFA96A1000F7215C7B719981B
• Submitted as: 1ccd748d2e0b0f58198fa065f0a6b3c7029ae93370c6904288b61a36902b8555
• File type: pe · Size: 31584 bytes
• Verdict: malicious (96/100) · Family: Cutwail

Detections (4 of 52 engines)

• ClamAV (daily): Win.Dropper.Agent-276899
• Microsoft Defender: Trojan:Win32/Cutwail.ACW!MTB
• Emsisoft (Emergency Kit): Rootkit.Kobcka.H
• Kaspersky (KVRT): Rootkit.Win32.Agent.blab

Why this verdict

The malicious score of 96/100 is the fusion of 3 weighted signals:

• ClamAV (daily) flagged Win.Dropper.Agent-276899 (rule Win.Dropper.Agent-276899) - engine signal, weight 0.90, confidence 0.95
• Microsoft Defender flagged Trojan:Win32/Cutwail.ACW!MTB (rule Trojan:Win32/Cutwail.ACW!MTB) - engine signal, weight 0.55, confidence 0.85
• Emsisoft (Emergency Kit) flagged Rootkit.Kobcka.H (rule Rootkit.Kobcka.H) - engine signal, weight 0.55, confidence 0.85

Dynamic analysis (windows)

0 behavior events · 0 ATT&CK techniques · 0 dropped files.

Runtime network

• none

More Cutwail samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report