MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 98d4f201c425b500e6fdd948460fa5b1de00a2fdfcbad05781e0c81ed6fca2b4. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments

SHA256 hash: 98d4f201c425b500e6fdd948460fa5b1de00a2fdfcbad05781e0c81ed6fca2b4
SHA3-384 hash: 1c797586cfd1211adf5a7cf136f5fd5e09c24041980f2b2226e4b029c80fda3e6184e23856f640b0bfc0a18f46f87cae
SHA1 hash: 1907d6d22f904be50e35ef914ef56efe7a0b5951
MD5 hash: 0a052f4af522be0f17add8ad141eb186
humanhash: venus-sweet-equal-minnesota
File name:88758957757.zip
Download: download sample
File size:375'939 bytes
First seen:2020-08-18 11:58:25 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:pI42e38tu0B36mewBteD1WXEAXyYjReXQmW99AL77/5tXr85JPgM1yyi9Mh03Pnw:m66KmeNDeEAXjReenQ7jb85r8TXOB
TLSH 418423DBF3056AB6E568CF99FDCBF85522477C221832324078EA15ADE8BFCD65148903
Reporter abuse_ch
Tags:zip


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: slot0.alqariab.store
Sending IP: 104.168.236.169
From: Centrel Srl <info@alqariab.store>
Subject: New Purchase Order 88758957757
Attachment: 88758957757.zip (contains "88758957757.exe")

Intelligence


File Origin
# of uploads :
1
# of downloads :
58
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
ByteCode-MSIL.Trojan.Generic
Status:
Suspicious
First seen:
2020-08-18 12:00:08 UTC
AV detection:
14 of 48 (29.17%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

zip 98d4f201c425b500e6fdd948460fa5b1de00a2fdfcbad05781e0c81ed6fca2b4

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments