MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 90c56bbe683d2278aed085d285f2b9e861de5e5607d1f398ca7163e330845064. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 90c56bbe683d2278aed085d285f2b9e861de5e5607d1f398ca7163e330845064
SHA3-384 hash: 3353c960b0d609787a75d053a4d865072a3f159dcb312ffb26b4cc4c297ed8a15376dc63899ffa8f6ff5009756bf40cb
SHA1 hash: 1c343f25b636ff9dedb0e1d121872ec490195155
MD5 hash: 45956b11596d5d08b94dc175fd74dcfe
humanhash: mobile-avocado-artist-robin
File name:PerfectTube.zip
Download: download sample
File size:350'100 bytes
First seen:2020-08-18 11:45:01 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:Zbla4mfPxmeYn4GHA9NmHl/VCiY3hC9lwbkSupQQS0y+lqgHTonQPypDYRn:ZlDSpin4KA9NmF/chELuQS08YknNNYRn
TLSH 3274231C164C5F5F5FCA28FC8B43E85A028146FB6789681D89DA72F6C0A98DBE54B10F
Reporter abuse_ch
Tags:zip


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: pro.mxout.rediffmailpro.com
Sending IP: 119.252.152.28
From: Perfect Tubes Ltd <deepak.naik@perfecttubes.com>
Subject: We Have Remitted Your Invoice Payment
Attachment: PerfectTube.zip (contains "PerfectTube.cmd")

Intelligence

File Origin
# of uploads :
1
# of downloads :
59
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Porcupine.Malware.43883.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/90c56bbe683d2278aed085d285f2b9e861de5e5607d1f398ca7163e330845064/
Threat name:
Win32.PUA.Vigua
Create hunting rule
Status:
Malicious
First seen:
2020-08-18 11:39:40 UTC
AV detection:
23 of 29 (79.31%)
Threat level:
  1/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=sdcwxptihurhrlwqqxjil4vz5bq54xswa7i7hggkofr6gmeekbsa._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

zip 90c56bbe683d2278aed085d285f2b9e861de5e5607d1f398ca7163e330845064

(this sample)

Executable exe 363755d7a78e52ae1314c7c4a485048269a9680e93bc4cb82098ca6139bfd912

  
Dropping
MD5 1f579fbfea4243d9585586c39913d0ab
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 363755d7a78e52ae1314c7c4a485048269a9680e93bc4cb82098ca6139bfd912

Comments