MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9e661f880537b56b8620801025d60423f710f22504b5c7f2062460bab22609ef. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 9e661f880537b56b8620801025d60423f710f22504b5c7f2062460bab22609ef
SHA3-384 hash: 9f4456242758d83f221745527ec40f1ac08fd090bc961e33f4899c3eced218eb0e5a1790b3e012f78b9ec398d081aef3
SHA1 hash: 6c0981f4020a2066d1da830fe14763648237414f
MD5 hash: 657d27a9136522fb5fc90499cda93ec8
humanhash: march-twelve-purple-mike
File name:Agency Appoinment Letter MT OCEAN CHEMIST_pdf.arj
Download: download sample
File size:747'980 bytes
First seen:2020-05-13 10:17:58 UTC
Last seen:Never
File type: arj
MIME type:application/x-rar
ssdeep 12288:0w5p5d6EvEkftRqkQLO6+hl2YnpFgLDxr4KTA+PG26p7ymZEw:LPX6EckrbuOH0Upyl0MzPePZEw
TLSH D8F4338EA58686187B4B157C3F41E13266E859442ED5ED02ED5ECC3EC2BA071E0A39FD
Reporter abuse_ch
Tags:arj


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: linux.nedahosting.ir
Sending IP: 87.247.177.56
From: Platinum Marine Bunker Co. Ltd. <info@platinummarine.com>
Reply-To: info@platinummarine.com
Subject: RE: MT OCEAN CHEMIST / V.2004B / DUE SINGAPORE OR TANGJUNG PELEPAS,\x0a MALAYSIA FOR LOADING - AGENT APPOINTMENT
Attachment: Agency Appoinment Letter MT OCEAN CHEMIST_pdf.arj (contains "Agency Appoinment Letter MT OCEAN CHEMIST_pdf.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
79
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.27382.Rar5Heur.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Injector
Create hunting rule
Status:
Malicious
First seen:
2020-05-13 10:36:50 UTC
File Type:
Binary (Archive)
Extracted files:
27
AV detection:
24 of 48 (50.00%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=tztb7cafg62wxbraqaiclvqeep3rb4rfas24p4qgerqlvmrgbhxq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

arj 9e661f880537b56b8620801025d60423f710f22504b5c7f2062460bab22609ef

(this sample)

Executable exe 8ca9ad9aedc2d32e50609ca807c71c459560d63b78c9022d7b6d9ad480d19498

  
Dropping
MD5 c7adccfe4094f8cc01dc0fb367c84a3d
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 8ca9ad9aedc2d32e50609ca807c71c459560d63b78c9022d7b6d9ad480d19498

Comments