MALICIOUS — Kampana(A)_BOOT.IMA
MALICIOUS — Kampana(A)_BOOT.IMA is a unknown sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (86/100), attributed to the UNOFFICIAL family. 1 of 46 detection engines flagged it.
Identification
- SHA-256:
a1a954a20e50bab0e9827180d4f4a8754654e3d41de73c4897dbf81487e6cef7 - SHA-1:
a55e74ed688019bc764241bfad3bd114c78b6280 - MD5:
4f98b457b6fda6b68c88884d56713f6b - ssdeep:
6144:0k54ga7Z/AapCX7pU1YsNvF4QnYVectrCiyNHRYQR0PjJYyHppliOVH+:0k54BZ/AapjvFvYPr+HhR4jJYzOVH+ - TLSH:
T1AB466105B3F0107FC5AABB776894452FCC8191DA229339F68BC58B81E538953E03A667 - Submitted as: Kampana(A)_BOOT.IMA
- File type: unknown · Size: 294912 bytes
- Verdict: malicious (86/100) · Family: UNOFFICIAL
Source: theZoo · first seen 2026-07-26T03:29:57.426Z · SHA-256 not source-verified
Detections (1 of 46 engines)
- ClamAV (daily): {HEX}bin.trojan.generic.anti.36.UNOFFICIAL
Why this verdict
The malicious score of 86/100 is the fusion of 1 weighted signal:
- ClamAV (daily) flagged {HEX}bin.trojan.generic.anti.36.UNOFFICIAL (rule
{HEX}bin.trojan.generic.anti.36.UNOFFICIAL) - engine signal, weight 0.90, confidence 0.95
Embedded domains
- mixcom.com
- xcommand.com
- edit.com
File paths
- c:\test
- C:\TEST
- d:\sd\
- D:\SD
- C:\DOS
- C:\PKWARE
- D:\PAYROLL\JUNE\HOURS.PYS
- C:\;C:\DOS;C:\UTIL;D:\WINDOWS
- C:\;C:\DOS;(etc...)
- C:\;C:\DOS;C:\PKWARE
- C:\DOS;
- C:\PKWARE.
- c:\pkware
- d:\wp51\
- c:\ranma\
- c:\util\
- c:\wp51\text\
- c:\dos\attrib.exe
- d:\coreldrw\
- c:\wp51\docs\zoofund.wp
- c:\mymail\
- d:\payroll\
- p:\backup\sdsource.zip
- d:\c700\work\sd
- d:\text\
More UNOFFICIAL samples · Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report