MALICIOUS — 962ddc5358b7a552eed174c94ec23f5295b3dfe3cf7f51ec1d56ed2cad2fedc5
MALICIOUS — 962ddc5358b7a552eed174c94ec23f5295b3dfe3cf7f51ec1d56ed2cad2fedc5 is a pe sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (98/100), attributed to the Crypted family. 4 of 56 detection engines flagged it.
Identification
- SHA-256:
962ddc5358b7a552eed174c94ec23f5295b3dfe3cf7f51ec1d56ed2cad2fedc5 - SHA-1:
ee7d8be94f5d1e81e00ce8edacc8ce14131da018 - MD5:
1af48c75d60158946b9febab40a88346 - imphash:
a64e048b98d051ae6e6b6334f77c95d3 - ssdeep:
768:49Kn6b4BmdW2uDop/8U0MU0I9jIHDl0pLIoGftn8lWKbXyyfrDM0E/1H5C:5n6b40g2uM3I96l4IoWRwdryn0mI - TLSH:
T1EA336B035123AD42E89573E958AC3A5E478FDEB34AEA37146D3BB357100A10FB6410AF - Submitted as: 962ddc5358b7a552eed174c94ec23f5295b3dfe3cf7f51ec1d56ed2cad2fedc5
- File type: pe · Size: 51712 bytes
- Verdict: malicious (98/100) · Family: Crypted
Detections (4 of 56 engines)
- ClamAV (daily): Win.Trojan.Crypted-30
- Microsoft Defender: Backdoor:Win32/Berbew!pz
- Emsisoft (Emergency Kit): GenPack:Generic.Dacic.1.Backdoor.Hangup.A.39B433A1
- Kaspersky (KVRT): Trojan-Proxy.Win32.Qukart.gen
Why this verdict
The malicious score of 98/100 is the fusion of 4 weighted signals:
- ClamAV (daily) flagged Win.Trojan.Crypted-30 (rule
Win.Trojan.Crypted-30) - engine signal, weight 0.90, confidence 0.95 - Microsoft Defender flagged Backdoor:Win32/Berbew!pz (rule
Backdoor:Win32/Berbew!pz) - engine signal, weight 0.55, confidence 0.85 - Emsisoft (Emergency Kit) flagged GenPack:Generic.Dacic.1.Backdoor.Hangup.A.39B433A1 (rule
GenPack:Generic.Dacic.1.Backdoor.Hangup.A.39B433A1) - engine signal, weight 0.55, confidence 0.85 - Kaspersky (KVRT) flagged Trojan-Proxy.Win32.Qukart.gen (rule
Trojan-Proxy.Win32.Qukart.gen) - engine signal, weight 0.55, confidence 0.85
Dynamic analysis (windows)
0 behavior events · 0 ATT&CK techniques · 0 dropped files.
Runtime network
- none
More Crypted samples · Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report