MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 329ad300db13941747388cb7e32c6ef8f8875d3090cb9ebf09aa51420faa9bfa. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 329ad300db13941747388cb7e32c6ef8f8875d3090cb9ebf09aa51420faa9bfa
SHA3-384 hash: ebf2d995e62c037c15b753d6206ae64eb388ec020f012324e503b3d2f14f1da224a3f022457c19eeb223ba53e4576d5b
SHA1 hash: 840844dd376a303f47b12c7d6a3666b2f3c72782
MD5 hash: df8e653f18536b0940a671fba9253e5c
humanhash: december-butter-item-lactose
File name:73673777637883.zip
Download: download sample
File size:389'982 bytes
First seen:2020-08-18 05:39:29 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:Maiv7+CuBNxLljuKldE/1Gb6x4VJt0WFXQ/PEn1RZkzNJHi8DCtr/XQQ4qhuh997:FG7hu3GKldE4b6xCJt0WFg/P81X+i8Dn
TLSH 1B8423E7AEA54EC7EC1A377A6AD3C054B9ECC9F163D718222505DA69040F1E38463FE4
Reporter cocaman
Tags:zip


Avatar
cocaman
Malicious email
From: eteran@andreani.com
Received: from andreani.com (unknown [185.222.57.205])
Date: 17 Aug 2020 20:28:19 -0700
Subject: =?UTF-8?B?5Zue5aSNOiBDaGluZXNlIFB1bHNlIE94aW1ldGVy?=
Attachment: 73673777637883.zip

Intelligence

File Origin
# of uploads :
1
# of downloads :
60
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/329ad300db13941747388cb7e32c6ef8f8875d3090cb9ebf09aa51420faa9bfa/
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-08-17 23:44:54 UTC
File Type:
Binary (Archive)
Extracted files:
4
AV detection:
22 of 29 (75.86%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=gknngag3cokborzyrs36gldo7d4ioxjqsdfz5pyjvjiued5ktp5a._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

zip 329ad300db13941747388cb7e32c6ef8f8875d3090cb9ebf09aa51420faa9bfa

(this sample)

Executable exe fb764def7db7639577aaf3991926ccfc30be6720af017184c729e4c6733e15b4

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 fb764def7db7639577aaf3991926ccfc30be6720af017184c729e4c6733e15b4

Comments