MALICIOUS — 45817ed86c150acd2c8342f62fa1c25245c9cf8199ec620c5026d51edf778d15

MALICIOUS — 45817ed86c150acd2c8342f62fa1c25245c9cf8199ec620c5026d51edf778d15 is a pe sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (89/100), attributed to the Redirect family. 5 of 55 detection engines flagged it.

Identification

• SHA-256: 45817ed86c150acd2c8342f62fa1c25245c9cf8199ec620c5026d51edf778d15
• SHA-1: 3b474e8ec5def401da966ce60073fcab2d28cde5
• MD5: 95011f14c24e1a57e3b1a7b172b2d394
• imphash: 6a01fc6123ffae0fae2c4f39fd37f27e
• ssdeep: 6144:vom2efufqcdzfvV4PdAJk0woMhR3lv2XGKbcguRY/KMRAA:AmD2CcdbvV4mJkdVR3lv2XfcrRBjA
• TLSH: T12347DF4B15F1BE94E49A09D6D02DE4AC305F82A5B01F03CDB5B7BF8E6D360EB6520A41
• Submitted as: 45817ed86c150acd2c8342f62fa1c25245c9cf8199ec620c5026d51edf778d15
• File type: pe · Size: 348914 bytes
• Verdict: malicious (89/100) · Family: Redirect

Detections (5 of 55 engines)

• ClamAV (daily): Win.Trojan.Redirect-6055402-0
• YARA: JPCERT/CC: JPCERT_HUILoader_PlugX_SideLoad
• Microsoft Defender: Trojan:Win32/Zbot!pz
• Trellix Stinger (McAfee): PWS-Zbot-FATG!95011F14C24E
• Kaspersky (KVRT): UDS:Trojan.Win32.ShipUp.bpu

Why this verdict

The malicious score of 89/100 is the fusion of 2 weighted signals:

• ClamAV (daily) flagged Win.Trojan.Redirect-6055402-0 (rule Win.Trojan.Redirect-6055402-0) - engine signal, weight 0.90, confidence 0.95
• YARA: JPCERT/CC flagged JPCERT_HUILoader_PlugX_SideLoad (rule JPCERT_HUILoader_PlugX_SideLoad) - engine signal, weight 0.35, confidence 0.70

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

More Redirect samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report