MALICIOUS — $Recycle.Bin .exe

MALICIOUS — $Recycle.Bin .exe is a pe sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (87/100), attributed to the Mira family. 4 of 55 detection engines flagged it.

Identification

• SHA-256: 279911917e30f888b07fd9ba6abd6b8eb3e69d968117f4d27f7b7fba7e631173
• SHA-1: b5de340310deb7745e9af91a548d16ccb687bfa3
• MD5: 9d28da73c36236076674e2dab027b7c2
• imphash: 3a2003ea545fe942681da9e7683ebb58
• ssdeep: 6144:6BxIK3CTW8TMjp41u6nyHwnZ6+SsJFfw2QujCRpGPkZeL9Vc7JJXUsnpRgG:CxIK9V14ImyHY6+SsJtKR5JksnpRgG
• TLSH: T14449AE00A0DA37E3CB8D948D89A19F2E56A3B560147C26F7E745EA4DD0EA33751D8C07
• Submitted as: $Recycle.Bin .exe
• File type: pe · Size: 420288 bytes
• Verdict: malicious (87/100) · Family: Mira

Detections (4 of 55 engines)

• MalwareAnalyser heuristics (entropy/packer): high-entropy-sections:.lol 1
• ClamAV (daily): Win.Packed.Mira-7330891-0
• Microsoft Defender: Trojan:Win32/Krap!pz
• Kaspersky (KVRT): HEUR:Trojan.Win32.Generic

Why this verdict

The malicious score of 87/100 is the fusion of 2 weighted signals:

• ClamAV (daily) flagged Win.Packed.Mira-7330891-0 (rule Win.Packed.Mira-7330891-0) - engine signal, weight 0.90, confidence 0.95
• Packing/obfuscation: high-entropy-sections:.lol 1 - static signal, weight 0.25, confidence 0.55

Dynamic analysis (windows)

0 behavior events · 0 ATT&CK techniques · 0 dropped files.

Runtime network

• none

More Mira samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report