MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 520a7a3fc26f8bb2fc2e4b5ce4e775183e8f92e7b334e97cf2b7dda3c0353395. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Intelligence 2 File information 2 Yara Comments

SHA256 hash: 520a7a3fc26f8bb2fc2e4b5ce4e775183e8f92e7b334e97cf2b7dda3c0353395
SHA3-384 hash: 18f7ce8f51addf34e427d44bd7ace8dd7b700bcc89d0732e017fc1282fb77a38ae7615e1fd3ccd95269bfd4c21e97e79
SHA1 hash: e57738ef936c2e2162a9ffce2f8349e4cc90a299
MD5 hash: bfe55317b112bfdd8ae377c2e3facff5
humanhash: michigan-papa-summer-item
File name:DHL AWB 406506482.iso
Download: download sample
Signature HawkEye
File size:758'033 bytes
First seen:2020-06-30 06:03:55 UTC
Last seen:2020-06-30 08:47:58 UTC
File type: rar
MIME type:application/x-rar
ssdeep 12288:6Hazt+PpDxTdlXO6GcUs5IVc1VCenHezga/LASXmE9GrnVn05JR2bx/AkmpwZjZ6:6ZPDdscUsuVc1VCC8LAStsrnKp2pA+41
TLSH EDF433A7966045B2BD568C9CCE6113438D06B720DCAD530728EFDA8F62B972C0E745EB
Reporter @cocaman
Tags:HawkEye iso


Twitter
@cocaman
Malicious email
From: DHL EXPRESS <noreply@dnl.com>
Received: from mail.amdigital.ro (cw176-abf-agb55.romania-webhosting.com [176.126.172.55])
Date: Tue, 30 Jun 2020 05:45:28 +0100
Subject: Re: ==ARRIVAL NOTICE===DHL (AWB) Delivery Notification***Docs for
Customs clearance
Attachment: DHL AWB 406506482.iso

Intelligence


Mail intelligence
Trap location Impact
DE Germany Low
Global High
CH Switzerland Low
IT Italy Low
# of uploads 2
# of downloads 31
Origin country FR FR
ClamAV No detection
CERT.PL MWDB Detection:n/a
Link: https://mwdb.cert.pl/sample/520a7a3fc26f8bb2fc2e4b5ce4e775183e8f92e7b334e97cf2b7dda3c0353395/
ReversingLabs :Status:Benign
Threat name:No data
First seen:2020-06-30 06:05:12 UTC
AV detection:2 of 48 (4.17%)
Trust factor:
Spamhaus Hash Blocklist :Suspicious file
VirusTotal:Virustotal results 6.56%

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

HawkEye

rar 520a7a3fc26f8bb2fc2e4b5ce4e775183e8f92e7b334e97cf2b7dda3c0353395

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments