MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0ad8cb7cabfee3d4cd5aaa3a62cb8dfe721806247cf09d32e2fd1a4f439cbb03. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 0ad8cb7cabfee3d4cd5aaa3a62cb8dfe721806247cf09d32e2fd1a4f439cbb03
SHA3-384 hash: 28a4ec7541fd5fe2248a8cbbc99863209acfdfb15e38ef9eb30ad18637c7be116733eabb8c16f2ef5600632390bd8842
SHA1 hash: e0e93078359a52a1a8a1944062809ac877c69bc8
MD5 hash: ec6419a823ace29f891b9790f6f19de4
humanhash: april-texas-johnny-crazy
File name:INVOICE QUOTATION.rar
Download: download sample
File size:269'205 bytes
First seen:2020-05-13 10:07:22 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 6144:bsWDPTi7vf6+0yUnvieSGxjZWIqHlpUcA:AWDTi730yR2ZhqHlW7
TLSH 234423463580FE9B7DB5D57059E2EB9AD9634E22012BB80FB83027D244DA2B2F13D097
Reporter abuse_ch
Tags:rar


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: colorntouch.co
Sending IP: 111.90.141.162
From: Lily Tran Zulueta <purchasing@majuuniversal.com>
Reply-To: intertradeemito@gmail.com
Subject: REQUEST FOR QUOTATION - PR-S/P-100789
Attachment: INVOICE QUOTATION.rar (contains "INVOICE QUOTATION.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
79
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-05-13 10:36:33 UTC
File Type:
Binary (Archive)
Extracted files:
49
AV detection:
16 of 30 (53.33%)
Threat level:
  2/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=blmmw7fl73r5jtk2vi5gfs4n7zzbqbreptyj2mxc7une6q44xmbq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

rar 0ad8cb7cabfee3d4cd5aaa3a62cb8dfe721806247cf09d32e2fd1a4f439cbb03

(this sample)

Executable exe 76333652b5c82499dde362e8892ff2316a455ee5118f6127d6462ec3654cd544

  
Dropping
MD5 ce782e48af863ce626b3100648b9bb13
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 76333652b5c82499dde362e8892ff2316a455ee5118f6127d6462ec3654cd544

Comments