CLEAN — dabfa30db15bb32b037708eb0d80a7b1d0d73ebc483f45e3195a8863a93eef87

CLEAN — dabfa30db15bb32b037708eb0d80a7b1d0d73ebc483f45e3195a8863a93eef87 is a pe sample analyzed by MalwareAnalyzer by Cyble with a clean verdict (21/100). 0 of 55 detection engines flagged it.

Identification

• SHA-256: dabfa30db15bb32b037708eb0d80a7b1d0d73ebc483f45e3195a8863a93eef87
• SHA-1: 8b36e539eb8373b6919e49dde54d5313d7673aac
• MD5: e8c935e042dbe1204b5cf85a8b520c8e
• imphash: 8b550ab258e8f33e9a5161733ca078d7
• ssdeep: 6144:R+TyioSMsiwXgsMvApOmyHGAQOT5y59ssgEV0wMsatS6imLc9hlwCacIT51oXttA:oXRhQvAFmsdKbkwlcIT5kA
• TLSH: T15C48A60573690079C4EB4877689D4E1ED851269E301164F3C5EA9B80BAB49F3BC1E2FB
• Submitted as: dabfa30db15bb32b037708eb0d80a7b1d0d73ebc483f45e3195a8863a93eef87
• File type: pe · Size: 372026 bytes
• Verdict: clean (21/100)

Detections (0 of 55 engines)

No engine flagged this sample.

Why this verdict

The clean score of 21/100 is the fusion of 1 weighted signal:

• Embedded network infrastructure: http://www.gnu.org/software/coreutils/, http://translationproject.org/team/, http://gnu.org/licenses/gpl.html - static signal, weight 0.35, confidence 0.60

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Embedded URLs

• http://www.gnu.org/software/coreutils/
• http://translationproject.org/team/
• http://gnu.org/licenses/gpl.html
• http://www.gnu.org/gethelp/
• http://pubs.opengroup.org/onlinepubs/9699919799/
• http://tiswww.case.edu/~chet/bash/POSIX

Embedded domains

• www.gnu.org
• translationproject.org
• gnu.org
• cygwin.com
• 1.sh
• pubs.opengroup.org
• tiswww.case.edu
• case.edu
• ftp.gnu.org

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report