MALICIOUS — 974ecaa30e49d3ab04e8eb071daac36106fe5ebde46217bbe8d4f3f633744800

MALICIOUS — 974ecaa30e49d3ab04e8eb071daac36106fe5ebde46217bbe8d4f3f633744800 is a pe sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (86/100). 4 of 55 detection engines flagged it.

Identification

• SHA-256: 974ecaa30e49d3ab04e8eb071daac36106fe5ebde46217bbe8d4f3f633744800
• SHA-1: 9d2f191571e4c03cb4cfa0e9a293d9d6ae00adfe
• MD5: 02d251884eb0090d193dd4452c61337c
• imphash: c0d8ad311e75af19ffafe7ccdcfd28e7
• ssdeep: 3072:mOo4ZNY0sUPb1WpXVxAaGBvbNvNbNJkvmhyPQbaDTUXGIDbwKDqCtrwdAxaVTtVk:Dow7oIDbByGPMsMP8
• TLSH: T1953E64E4FB15C56CD0AFF54F09449C6E2BCEC205861E90E82A2EA70E8187A734D5753D
• Submitted as: 974ecaa30e49d3ab04e8eb071daac36106fe5ebde46217bbe8d4f3f633744800
• File type: pe · Size: 138818 bytes
• Verdict: malicious (86/100)

Detections (4 of 55 engines)

• ClamAV (daily): Win.Trojan.VB-1421
• Microsoft Defender: flagged
• Trellix Stinger (McAfee): Downloader-CJX.gen.g
• Kaspersky (KVRT): Worm.Win32.VBNA.alpv

Why this verdict

The malicious score of 86/100 is the fusion of 1 weighted signal:

• ClamAV (daily) flagged Win.Trojan.VB-1421 (rule Win.Trojan.VB-1421) - engine signal, weight 0.90, confidence 0.95

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report