MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 07efe1ca529876a7bf0f5f68981dc50d75ceec49452bf62b410110de1434768d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 07efe1ca529876a7bf0f5f68981dc50d75ceec49452bf62b410110de1434768d
SHA3-384 hash: 10585b6b490cbd2ef5cce6f6edddc230c1ff534392f0658000845bafb93b01919bbb4163e9237537f42d60853d64ad34
SHA1 hash: 8d0eb16e47b07550457bed22608b669df7ec9239
MD5 hash: 3a24eddb5a8a164502032de3d85b7559
humanhash: table-skylark-pasta-golf
File name:URGENT_QUOTATION_PR 270473.xlxs.zip
Download: download sample
File size:425'826 bytes
First seen:2020-08-18 11:00:31 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:L2hUDdNvHeX7vd5izQHt090pjhPrN3Suy:KuNvHeXDji8PrN3c
TLSH 9E942363F2D46C2CF2595BF392B003991F02DDDE897AF49226B4BF44F1162688387D66
Reporter abuse_ch
Tags:zip


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: paulaner.orion.rs
Sending IP: 77.105.37.159
From: Dasun Wanigasekara <om@icesmanfiji.com>
Subject: URGENT QUOTATION
Attachment: URGENT_QUOTATION_PR 270473.xlxs.zip (contains "URGENT_QUOTATION_PR #270473.xlxs.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
59
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/07efe1ca529876a7bf0f5f68981dc50d75ceec49452bf62b410110de1434768d/
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-08-18 11:02:11 UTC
AV detection:
20 of 29 (68.97%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=a7x6dssstb3kppypl5ujqhofbv2453cjiuv7mk2baein4fbuo2gq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

zip 07efe1ca529876a7bf0f5f68981dc50d75ceec49452bf62b410110de1434768d

(this sample)

Executable exe 8115c49913a90783959c7162af20db294520d29357220eb486792de11992a800

  
Dropping
MD5 7e54db307e154c82243690bcff7464e4
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 8115c49913a90783959c7162af20db294520d29357220eb486792de11992a800

Comments