MALICIOUS — cb62c9606007edec647b922617919e40b440a9b0779dac5d11403d3d64bf296c

MALICIOUS — cb62c9606007edec647b922617919e40b440a9b0779dac5d11403d3d64bf296c is a unknown sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (97/100), attributed to the Container family. 4 of 54 detection engines flagged it, exhibiting 1 ATT&CK technique.

Identification

• SHA-256: cb62c9606007edec647b922617919e40b440a9b0779dac5d11403d3d64bf296c
• SHA-1: 0ea7d181a2f380ce5bf6e62a572ab881749f75c7
• MD5: ef9a4643af2cddddb87fa20a856f2b08
• ssdeep: 48:LFM4pznRju10ZstzVvnccdYGc8a7cyHczrcr7cNrLci3cLMf591lbp:xM4pzRu1m6ZTYFhwo2Bbf5flbp
• TLSH: T1D116CCC136C52AABE96F22570D5EBE589972E6CA01F71420240DCFC4BB1E45B70674A2
• Submitted as: cb62c9606007edec647b922617919e40b440a9b0779dac5d11403d3d64bf296c
• File type: unknown · Size: 3137 bytes
• Verdict: malicious (97/100) · Family: Container

Detections (4 of 54 engines)

• ClamAV (daily): Win.Trojan.BAT-113
• YARA: delivr.to detections: DLV_ISO_IMG_Container_Lure
• YARA: MalwareAnalyser community pack: TL_Windows_Persistence_RunKey
• Kaspersky (KVRT): HEUR:Trojan.BAT.Assoc.gen

MITRE ATT&CK

• T1547.001

Why this verdict

The malicious score of 97/100 is the fusion of 5 weighted signals:

• ClamAV (daily) flagged Win.Trojan.BAT-113 (rule Win.Trojan.BAT-113) - engine signal, weight 0.90, confidence 0.95
• Kaspersky (KVRT) flagged HEUR:Trojan.BAT.Assoc.gen (rule HEUR:Trojan.BAT.Assoc.gen) - engine signal, weight 0.55, confidence 0.85
• YARA: delivr.to detections flagged DLV_ISO_IMG_Container_Lure (rule DLV_ISO_IMG_Container_Lure) - engine signal, weight 0.55, confidence 0.70
• YARA: MalwareAnalyser community pack flagged TL_Windows_Persistence_RunKey (rule TL_Windows_Persistence_RunKey) - engine signal, weight 0.40, confidence 0.70
• persist via registry run key (rule persist via registry run key) - capa signal, weight 0.35, confidence 0.60

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Registry keys

• HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
• HKLM\Software\Microsoft\Windows\CurrentVersion\Run

More Container samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report