MALICIOUS — 8b48b0945031d0a7fc8bb7470ff10c84ec91110df6c6dadebd4b661e63ce93d8

MALICIOUS — 8b48b0945031d0a7fc8bb7470ff10c84ec91110df6c6dadebd4b661e63ce93d8 is a pe sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (94/100), attributed to the Nezvfi family. 4 of 52 detection engines flagged it, exhibiting 1 ATT&CK technique.

Identification

• SHA-256: 8b48b0945031d0a7fc8bb7470ff10c84ec91110df6c6dadebd4b661e63ce93d8
• SHA-1: 87d33eb608bfc9c864cc72d246c48dcdc7644177
• MD5: 945c8926b87a6e02499d3823ea2c345d
• imphash: 044fa07aef4575da982ff3317702d6b1
• File type: pe · Size: 265642 bytes
• Verdict: malicious (94/100) · Family: Nezvfi

Detections (4 of 52 engines)

• ClamAV (daily): Win.Malware.Mira-6717565-0
• Kaspersky (KVRT): Trojan.Win32.Agent.nezvfi
• Microsoft Defender: Worm:Win32/Mira!rfn
• Emsisoft (Emergency Kit): Dump:Generic.Mira.632D18E4

MITRE ATT&CK

• T1547.001

Embedded domains

• fstream-inst.cc

More Nezvfi samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report