MALICIOUS — d1c8d2d7f2b28613d11cd72debdf3a91bebf7226cd7f84f57f62e4daca6bebb6

MALICIOUS — d1c8d2d7f2b28613d11cd72debdf3a91bebf7226cd7f84f57f62e4daca6bebb6 is a pe sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (91/100), attributed to the Brontok family. 6 of 52 detection engines flagged it.

Identification

• SHA-256: d1c8d2d7f2b28613d11cd72debdf3a91bebf7226cd7f84f57f62e4daca6bebb6
• SHA-1: aaf1c8ae1d939b143f69bd703f97f90d9bdf7c6e
• MD5: 8be91208867e03567abec84f8be75739
• imphash: 1b675db9a912fecbf83526e2fd37cf23
• ssdeep: 6144:2WC4YgB9GiytWC4YgB9Giy8mWC4YgB9GiygWC4YgB9GiyMWC4YgB9Giy8mWC4Ygg:FtJ9GihtJ9Gi7VtJ9GiatJ9GiKtJ9GiI
• TLSH: T15745E1C3653A3616DED7B0FA2084150F67A9C4801C7BECD44E6B81187B2872B68FD867
• Submitted as: d1c8d2d7f2b28613d11cd72debdf3a91bebf7226cd7f84f57f62e4daca6bebb6
• File type: pe · Size: 281421 bytes
• Verdict: malicious (91/100) · Family: Brontok

Detections (6 of 52 engines)

• MalwareAnalyser heuristics (entropy/packer): Petite
• ClamAV (daily): Win.Malware.Brontok-10037995-0
• Detect It Easy (packer/type): DIE:Petite 2.2
• Microsoft Defender: Worm:Win32/Rahiwi!pz
• Emsisoft (Emergency Kit): Gen:Variant.Worm.VB.75
• Kaspersky (KVRT): Email-Worm.Win32.Brontok.am

Why this verdict

The malicious score of 91/100 is the fusion of 3 weighted signals:

• ClamAV (daily) flagged Win.Malware.Brontok-10037995-0 (rule Win.Malware.Brontok-10037995-0) - engine signal, weight 0.90, confidence 0.95
• Detect It Easy (packer/type) flagged DIE:Petite 2.2 (rule DIE:Petite 2.2) - engine signal, weight 0.35, confidence 0.70
• Packing/obfuscation: Petite, high-entropy-sections:.petite, Petite 2.2 - static signal, weight 0.25, confidence 0.55

Dynamic analysis (windows)

0 behavior events · 0 ATT&CK techniques · 0 dropped files.

Runtime network

• none

More Brontok samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report