MALICIOUS — dataset_malwares.csv
MALICIOUS — dataset_malwares.csv is a unknown sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (90/100), attributed to the STRATO family. 3 of 54 detection engines flagged it, exhibiting 2 ATT&CK techniques.
Identification
- SHA-256:
a766eed81a5bead1f14cee2145c66b5268d23efd12f82f81adf71a53c6b76ebe - SHA-1:
9bae747408d6fd3e23e5c9b472f4adcd8413708e - MD5:
1077526ea67a5a46b7d492b6ce57a870 - ssdeep:
12288:Fdt4lL0JmNRYOUPYWjyCvInBnB+wnCxQOgKTcyvXDnmxIQ5:Fda9IOAYWOCao9pTcyvXKxIQ5 - TLSH:
T182669C19BFC15937FC502459D239590D002E5F17C0C22EDB9A8EE36B598F9834BAE4B8 - Submitted as: dataset_malwares.csv
- File type: unknown · Size: 6710740 bytes
- Verdict: malicious (90/100) · Family: STRATO
Detections (3 of 54 engines)
- YARA: MalwareAnalyser built-in: Generic_Credential_Theft_Strings
- capa (capabilities): capability:credential-access
- YARA: Stratosphere IPS: STRATO_Tor_Onion_C2
MITRE ATT&CK
YARA
- Generic_Credential_Theft_Strings
Why this verdict
The malicious score of 90/100 is the fusion of 5 weighted signals:
- References to browser/OS credential stores (rule
Generic_Credential_Theft_Strings) - yara signal, weight 0.60, confidence 0.90 - access stored credentials (rule
access stored credentials) - capa signal, weight 0.50, confidence 0.80 - YARA: Stratosphere IPS flagged STRATO_Tor_Onion_C2 (rule
STRATO_Tor_Onion_C2) - engine signal, weight 0.50, confidence 0.70 - YARA: MalwareAnalyser built-in flagged Generic_Credential_Theft_Strings (rule
Generic_Credential_Theft_Strings) - engine signal, weight 0.35, confidence 0.70 - capa (capabilities) flagged capability:credential-access (rule
capability:credential-access) - engine signal, weight 0.35, confidence 0.70
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
More STRATO samples · Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report