MALICIOUS — 8f7c615a342963c8a21dc6d210d80b50a93146ced7f361a3bbd53628cd270ea6

MALICIOUS — 8f7c615a342963c8a21dc6d210d80b50a93146ced7f361a3bbd53628cd270ea6 is a pe sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (86/100), attributed to the Crypted family. 5 of 52 detection engines flagged it.

Identification

• SHA-256: 8f7c615a342963c8a21dc6d210d80b50a93146ced7f361a3bbd53628cd270ea6
• SHA-1: 5d81774970ee9957387ad7c7aa3d8ca1a31efa9d
• MD5: bd9ce152a54f48ab94354a31bfeb3e5a
• imphash: c2a87fabf96470db507b2e6b43bd92eb
• ssdeep: 1536:TAPQ+udgOp7bVX8uJ3ele2awFmlRRbRIWW4I0PSjskq/+hoQJ8vkUjn3o:+X45X84n0Yl71IWWcPS6RQJ89o
• TLSH: T10B3CC2729A118A86EDBCBE19C0CBF8BDBC952AD473763253C046B9561541CB3B80F24D
• Submitted as: 8f7c615a342963c8a21dc6d210d80b50a93146ced7f361a3bbd53628cd270ea6
• File type: pe · Size: 114688 bytes
• Verdict: malicious (86/100) · Family: Crypted

Detections (5 of 52 engines)

• ClamAV (daily): Win.Trojan.Crypted-31
• Microsoft Defender: Backdoor:Win32/Berbew!pz
• Emsisoft (Emergency Kit): GenPack:Generic.Dacic.1.Backdoor.Hangup.A.8D3133A2
• Trellix Stinger (McAfee): Trojan-FUGH!BD9CE152A54F
• Kaspersky (KVRT): Trojan-Proxy.Win32.Qukart.vjh

Why this verdict

The malicious score of 86/100 is the fusion of 1 weighted signal:

• ClamAV (daily) flagged Win.Trojan.Crypted-31 (rule Win.Trojan.Crypted-31) - engine signal, weight 0.90, confidence 0.95

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

More Crypted samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report