MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 29bd4b45715ab1d6ce2555a17a078318478347e4ed5e08eee3d7f5b7203d47f7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AZORult


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 29bd4b45715ab1d6ce2555a17a078318478347e4ed5e08eee3d7f5b7203d47f7
SHA3-384 hash: edc0fe954fc88304bcb49ff53c1082f59e68cc3f41391d09974632b58b016a7392b8e08329c918f5946dd62ef9644d7e
SHA1 hash: 4e4e93767695916085a40d40b0ac6499f14f37ce
MD5 hash: 3f7573ddf0749c62cb973d701f284a08
humanhash: summer-wolfram-delta-tennessee
File name:Request for quotation.gz
Download: download sample
Signature AZORult
Create hunting rule
File size:179'273 bytes
First seen:2020-06-02 07:24:14 UTC
Last seen:Never
File type: gz
MIME type:application/x-rar
ssdeep 3072:4HG/u8kTZs+n+9dXANDxBT+jrXayT6AW5AEx5WX6B75yKIU49gmhWRGbLK:zBkNs++9qNNBKjrKzAW66OKeARSK
TLSH 450422A0CE55FB2B86C6CFEE1E8CE067F7762B5D16167E00DC12973B2871909C025E59
Reporter jarumlus
Tags:AZORult

Intelligence

File Origin
# of uploads :
1
# of downloads :
63
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-06-02 07:36:41 UTC
File Type:
Binary (Archive)
Extracted files:
17
AV detection:
20 of 48 (41.67%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=fg6uwrlrlky5ntrfkwqxub4ddbdygr7e5vpar3xd2723oib5i73q._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AZORult

gz 29bd4b45715ab1d6ce2555a17a078318478347e4ed5e08eee3d7f5b7203d47f7

(this sample)

AZORult

Executable exe eb96ab93249a86be52aa53a58fb8667b4c54f6b6dbc899fd23ea56b12b52a001

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 eb96ab93249a86be52aa53a58fb8667b4c54f6b6dbc899fd23ea56b12b52a001
  
Dropping
MD5 1b36ba6f20f9796e513f52bfb9e1880b

Comments