SUSPICIOUS — 407956e9b5d4466006efe0ac21664d2419c6f4f97499ba62a8cc08b085c98be4

SUSPICIOUS — 407956e9b5d4466006efe0ac21664d2419c6f4f97499ba62a8cc08b085c98be4 is a unknown sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (47/100). 1 of 54 detection engines flagged it.

Identification

• SHA-256: 407956e9b5d4466006efe0ac21664d2419c6f4f97499ba62a8cc08b085c98be4
• SHA-1: 8b74ba7eb952ba6021cabb6b1ba17e5c5ae62bd6
• MD5: 59d975ebeda27d7986739d0d04d1f0ff
• ssdeep: 3:8IIRRQLGRNaASVVVNc3a5kVccAcKRnRQcneFbxn:ZIRnqVV3c3ykVccAcK2ceFbx
• TLSH: T1520B2B52F4052FE8085C2D103CED52841F37B5500A001110130C036313E8E006849F0D
• Submitted as: 407956e9b5d4466006efe0ac21664d2419c6f4f97499ba62a8cc08b085c98be4
• File type: unknown · Size: 126 bytes
• Verdict: suspicious (47/100)

Detections (1 of 54 engines)

• Microsoft Defender: TrojanDownloader:JS/Phish.PQN!MTB

Why this verdict

The suspicious score of 47/100 is the fusion of 1 weighted signal:

• Microsoft Defender flagged TrojanDownloader:JS/Phish.PQN!MTB (rule TrojanDownloader:JS/Phish.PQN!MTB) - engine signal, weight 0.55, confidence 0.85

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Embedded domains

• mt2.tryd.pro

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report