MALICIOUS — virussign.com_01a29ba3e407c1116d3c827d9b7b0050.vir

MALICIOUS — virussign.com_01a29ba3e407c1116d3c827d9b7b0050.vir is a pe sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (86/100), attributed to the Starter family. 5 of 52 detection engines flagged it.

Identification

• SHA-256: 491957369e0816e8294b6fec00dc93f904a5512cfc092d3e8dc583d591b06efc
• SHA-1: 5fa6fa29eb9aecafb8d9dd276c386c304ebdbd64
• MD5: 01a29ba3e407c1116d3c827d9b7b0050
• imphash: b6f391375d741ab65301de3824d105be
• ssdeep: 24:eH1GSi9vPQeDR21SMwh0tYPFThtdnIUovRidLYH/hgUI:yOgqQ1hWMStdnapidcO
• TLSH: T1FB17FD3281688391E255FB49AAD3CE8CB6B252A6993F7A20A0264869604C707E109317
• Submitted as: virussign.com_01a29ba3e407c1116d3c827d9b7b0050.vir
• File type: pe · Size: 3584 bytes
• Verdict: malicious (86/100) · Family: Starter

Source: VirusSign · first seen 2026-08-06T00:00:00.000Z · SHA-256 verified

Detections (5 of 52 engines)

• ClamAV (daily): Win.Trojan.Starter-290
• Microsoft Defender: Trojan:Win32/Ramnit!pz
• Emsisoft (Emergency Kit): Trojan.Agent.EBDQ
• Trellix Stinger (McAfee): Trojan-FUNT!01A29BA3E407
• Kaspersky (KVRT): Trojan.Win32.Starter.yy

Why this verdict

The malicious score of 86/100 is the fusion of 1 weighted signal:

• ClamAV (daily) flagged Win.Trojan.Starter-290 (rule Win.Trojan.Starter-290) - engine signal, weight 0.90, confidence 0.95

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

More Starter samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report