MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4d71c241d6d226442cb25cdb82a373eca570f397ec18b7bf642dd7e48e32c9f6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 4d71c241d6d226442cb25cdb82a373eca570f397ec18b7bf642dd7e48e32c9f6
SHA3-384 hash: 835ca5bbd46d8d2a297339ba51b847edcbdd63d54c930bfa3efa45d0c39192cc5180548fa70e59457d41ae387bd1a5ef
SHA1 hash: 44789431a12758f7f43980c446700abbfaaa081c
MD5 hash: 1daff64769124d68470fc7d9303dcabf
humanhash: tango-oregon-fourteen-wolfram
File name:Purchase Order 77809 for acknowledgment.zip
Download: download sample
File size:261'659 bytes
First seen:2020-05-13 10:16:31 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:AVQpHFTbKprbjoOGbDylrqthW+vVlVDCJS2B4A1vjr:AVbNIOGb1qclDaB4AV
TLSH F14423E9117CB5538CC8812DAFD4AE73A2722E75585CB6D1C204EC18A7B3AB74B358F0
Reporter abuse_ch
Tags:zip


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: outriger.biz
Sending IP: 156.96.59.92
From: Kim Sung Hae<sales@outriger.biz>
Reply-To: aoer.wzaoer@gmail.com
Subject: Re: Purchase Order 77809 for acknowledgment
Attachment: Purchase Order 77809 for acknowledgment.zip (contains "Purchase Order 77809 for acknowledgment.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
80
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.22205.ZipHeur.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-05-13 07:05:38 UTC
File Type:
Binary (Archive)
Extracted files:
4
AV detection:
27 of 48 (56.25%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=jvy4eqow2iteilfsltnyfi3t5ssxb44x5qmlpp3efxl6jdrszh3a._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

zip 4d71c241d6d226442cb25cdb82a373eca570f397ec18b7bf642dd7e48e32c9f6

(this sample)

Executable exe eded02bf0afea18ebbcaa7682ad7f3d1215b064cd2a3185f230b87195ef85218

  
Dropping
MD5 c53593d4a3f7f541dbb2ec4c351191e7
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 eded02bf0afea18ebbcaa7682ad7f3d1215b064cd2a3185f230b87195ef85218

Comments