MALICIOUS — 33dacf68bf4f4479d7c1694670a879e4f7800de32825cfd75fc4b88c3a938b65
MALICIOUS — 33dacf68bf4f4479d7c1694670a879e4f7800de32825cfd75fc4b88c3a938b65 is a pe sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (91/100), attributed to the Fileinfector family. 3 of 55 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
33dacf68bf4f4479d7c1694670a879e4f7800de32825cfd75fc4b88c3a938b65 - SHA-1:
09af59f7c9366b177de86ec37c776cce778814b1 - MD5:
cfc78cc15b80f7bb7411c0af30307a6b - imphash:
a9192bab5c7c795c7488b69a1853f9c2 - ssdeep:
384:GBXUFh1yvN/uMmxDMmTeemEof4MZTe/OrHWV:MXUs1ZmxDMmNche2g - TLSH:
T12834A4C5612A2710ECF4E800EE58ED2CA1839996623B3BDC1406D43F75F9AFB017D5A9 - Submitted as: 33dacf68bf4f4479d7c1694670a879e4f7800de32825cfd75fc4b88c3a938b65
- File type: pe · Size: 57344 bytes
- Verdict: malicious (91/100) · Family: Fileinfector
Detections (3 of 55 engines)
- ClamAV (daily): Win.Malware.Fileinfector-9832954-0
- Microsoft Defender: flagged
- Kaspersky (KVRT): Virus.Win32.Lamer.ks
MITRE ATT&CK
Why this verdict
The malicious score of 91/100 is the fusion of 3 weighted signals:
- ClamAV (daily) flagged Win.Malware.Fileinfector-9832954-0 (rule
Win.Malware.Fileinfector-9832954-0) - engine signal, weight 0.90, confidence 0.95 - persist via registry run key (rule
persist via registry run key) - capa signal, weight 0.35, confidence 0.60 - Embedded network infrastructure: http://www.pinkworld.com, http://www.youporn.com, http://www.redtube.com - static signal, weight 0.35, confidence 0.60
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- http://www.pinkworld.com
- http://www.youporn.com
- http://www.redtube.com
- http://www.assparade.com/
- http://www.freeav.com/
- http://www.antispyware.com/
- http://www.antivirus.com/
Embedded domains
- www.pinkworld.com
- www.youporn.com
- www.redtube.com
- www.assparade.com
- www.freeav.com
- www.antispyware.com
- www.antivirus.com
File paths
- C:\Windows\system32\d3dx10_36.dll
- C:\Program
- C:\Progr
More Fileinfector samples · Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report