MALICIOUS — 7e96eaf4af62c6a53064386dbda3048573134218992abdab6dfced0b16fe0159

MALICIOUS — 7e96eaf4af62c6a53064386dbda3048573134218992abdab6dfced0b16fe0159 is a pe sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (99/100), attributed to the Crypted family. 5 of 56 detection engines flagged it.

Identification

• SHA-256: 7e96eaf4af62c6a53064386dbda3048573134218992abdab6dfced0b16fe0159
• SHA-1: ee9c12e9179f05cb42c29e7dab30eba653828580
• MD5: 6bf4da1ef6a95ee3e4e2ae152ec6eba0
• imphash: a64e048b98d051ae6e6b6334f77c95d3
• ssdeep: 768:Kpj7ysMmnENvqwDTE2K/FWYnMru1DbyNRLHQHWGj/1H5:sy1mEtvDTEzUYM2DmNpw2Gx
• TLSH: T1D5335BF36A1221D8FC6323079CA8B74DC149937F9DAB8E7A998B90EF45025DB650403D
• Submitted as: 7e96eaf4af62c6a53064386dbda3048573134218992abdab6dfced0b16fe0159
• File type: pe · Size: 52224 bytes
• Verdict: malicious (99/100) · Family: Crypted

Detections (5 of 56 engines)

• ClamAV (daily): Win.Trojan.Crypted-30
• Microsoft Defender: Backdoor:Win32/Berbew!pz
• Emsisoft (Emergency Kit): Generic.Dacic.1.Backdoor.Hangup.A.842BB078
• Trellix Stinger (McAfee): Trojan-FRJE!EE26B4202D9D
• Kaspersky (KVRT): Trojan-Proxy.Win32.Qukart.gen

Why this verdict

The malicious score of 99/100 is the fusion of 5 weighted signals:

• ClamAV (daily) flagged Win.Trojan.Crypted-30 (rule Win.Trojan.Crypted-30) - engine signal, weight 0.90, confidence 0.95
• Microsoft Defender flagged Backdoor:Win32/Berbew!pz (rule Backdoor:Win32/Berbew!pz) - engine signal, weight 0.55, confidence 0.85
• Emsisoft (Emergency Kit) flagged Generic.Dacic.1.Backdoor.Hangup.A.842BB078 (rule Generic.Dacic.1.Backdoor.Hangup.A.842BB078) - engine signal, weight 0.55, confidence 0.85
• Trellix Stinger (McAfee) flagged Trojan-FRJE!EE26B4202D9D (rule Trojan-FRJE!EE26B4202D9D) - engine signal, weight 0.55, confidence 0.85
• Kaspersky (KVRT) flagged Trojan-Proxy.Win32.Qukart.gen (rule Trojan-Proxy.Win32.Qukart.gen) - engine signal, weight 0.55, confidence 0.85

Dynamic analysis (windows)

0 behavior events · 0 ATT&CK techniques · 0 dropped files.

Runtime network

• none

More Crypted samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report