MALICIOUS — virussign.com_bb93634b72347aa5abea781fd041b2d0.vir

MALICIOUS — virussign.com_bb93634b72347aa5abea781fd041b2d0.vir is a pe sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (88/100), attributed to the Crypted family. 5 of 55 detection engines flagged it, exhibiting 1 ATT&CK technique.

Identification

• SHA-256: b4399ab9d3891ad6f2eabea85467d5199da55dfd9163696a4260126daba9828b
• SHA-1: 3ba47c326a1743833077d0f4a43be7e4d5258bc1
• MD5: bb93634b72347aa5abea781fd041b2d0
• imphash: 02f889462d5b9d177381fc53107a7ccd
• ssdeep: 1536:n7X0+rdkh+IaVWctd3mDzLWy5rPFW2iwTbW:n7X0GkhHaHcDfX9FW2VTbW
• TLSH: T126367DC5726FE4A6EDD756BAB040BD2DFB9210EE10F05F3591C0E109A9A828FD48D079
• Submitted as: virussign.com_bb93634b72347aa5abea781fd041b2d0.vir
• File type: pe · Size: 65536 bytes
• Verdict: malicious (88/100) · Family: Crypted

Source: VirusSign · first seen 2026-08-18T00:00:00.000Z · SHA-256 verified

Detections (5 of 55 engines)

• ClamAV (daily): Win.Trojan.Crypted-30
• Microsoft Defender: TrojanDownloader:Win32/Berbew!pz
• Emsisoft (Emergency Kit): GenPack:Backdoor.Hangup.B
• Trellix Stinger (McAfee): Trojan-FVOJ!BB93634B7234
• Kaspersky (KVRT): Trojan-Spy.Win32.Qukart.af

MITRE ATT&CK

• T1071.001

Why this verdict

The malicious score of 88/100 is the fusion of 2 weighted signals:

• ClamAV (daily) flagged Win.Trojan.Crypted-30 (rule Win.Trojan.Crypted-30) - engine signal, weight 0.90, confidence 0.95
• communicate over HTTP (rule communicate over HTTP) - capa signal, weight 0.30, confidence 0.60

Dynamic analysis (windows)

0 behavior events · 0 ATT&CK techniques · 0 dropped files.

Runtime network

• none

Embedded domains

• go.microsoft.com
• microsoft.com
• r.office.microsoft.com

More Crypted samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report