MALICIOUS — cc75292ce9ce1cefce3de07c254f4982b643e6d31f36b19a60794ffe0fb42531

MALICIOUS — cc75292ce9ce1cefce3de07c254f4982b643e6d31f36b19a60794ffe0fb42531 is a pe sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (89/100). 4 of 52 detection engines flagged it.

Identification

• SHA-256: cc75292ce9ce1cefce3de07c254f4982b643e6d31f36b19a60794ffe0fb42531
• SHA-1: 492b6839d7fbb447c255968cf84d69b6ebd63f58
• MD5: 95f02a3e5b46ae5e463418420b63ee86
• imphash: 38aa7c2ff6ef0e48a9520d6702d08df4
• ssdeep: 768:+1uAkERoZd51OVav1EFMFn1+aSVFhNGpWvi/av1EFMFn1+aSkav1EFMFn1+aSD:+0nERoZdnOVmEFMFnMlFhNGpWvi/mEFe
• TLSH: T1253128A43355112FCAA3C5BF4AE4CA2C617275EA21A244F083C6D660D4EDDA7BC3534B
• Submitted as: cc75292ce9ce1cefce3de07c254f4982b643e6d31f36b19a60794ffe0fb42531
• File type: pe · Size: 42203 bytes
• Verdict: malicious (89/100)

Detections (4 of 52 engines)

• ClamAV (daily): Win.Trojan.Agent-6943819-1
• Microsoft Defender: flagged
• Emsisoft (Emergency Kit): Win32.Sivis.A
• Kaspersky (KVRT): Virus.Win32.Agent.es

Why this verdict

The malicious score of 89/100 is the fusion of 2 weighted signals:

• ClamAV (daily) flagged Win.Trojan.Agent-6943819-1 (rule Win.Trojan.Agent-6943819-1) - engine signal, weight 0.90, confidence 0.95
• Embedded network infrastructure: http://www.gnu.org/licenses/, http://creativecommons.org/publicdomain/zero/1.0/ - static signal, weight 0.35, confidence 0.60

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Embedded URLs

• http://www.gnu.org/licenses/
• http://creativecommons.org/publicdomain/zero/1.0/

Embedded domains

• cwru.edu
• gnu.org
• www.gnu.org
• creativecommons.org
• geocities.com

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report