MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b6aceabd9ec0ed9e95a65be7e3d4350abbfacc38f32a72e4922b61252bbd6223. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: b6aceabd9ec0ed9e95a65be7e3d4350abbfacc38f32a72e4922b61252bbd6223
SHA3-384 hash: dcb8d37c299990f6156a43d79f731aa4823a858c7918da3279511addd06d7077d8f8ce06aeee90f103bac661596b5c24
SHA1 hash: 29a4304d0be28870b74319359a9f063f80417e7c
MD5 hash: b91c4ebaf700df2eebfd8ad657f2f9c3
humanhash: hydrogen-may-wyoming-colorado
File name:U_R_G_ENT O_R-DER JuneJuly.zip
Download: download sample
File size:804'503 bytes
First seen:2020-05-13 10:16:22 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:cngeWIXyZ4UDe/51Y1zqN4nbha2FWe56MuVDlkCi/jS+fVZuCR1c34qATY4LQBV6:cngeNg1uSn8uWfMuVDijuCRI4VYhVaR
TLSH A5053311A051A04A359DFA512FF5BC1F03BBE36AF0F378887786FCEED811158681A99D
Reporter abuse_ch
Tags:zip


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: cmp.com.ph
Sending IP: 45.11.19.32
From: Cem YÜRÜK <chyap@cmp.com.ph>
Subject: Re: U_R_G_ENT O_R-DER/ June/July Shipment
Attachment: U_R_G_ENT O_R-DER JuneJuly.zip (contains "ReU_R_G_ENT O_R-DER JuneJuly.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
81
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Artemis8D196B6F2687.18830.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-05-13 10:36:54 UTC
File Type:
Binary (Archive)
Extracted files:
10
AV detection:
21 of 48 (43.75%)
Threat level:
  2/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=w2wovpm6ydwz5fnglpt6hvbvbk57vtby6mvhfzesfnqskk55mirq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

zip b6aceabd9ec0ed9e95a65be7e3d4350abbfacc38f32a72e4922b61252bbd6223

(this sample)

Executable exe eb105b408d5010f2bb82c8d5960af3303e96e7fd64d7777263d475c351b6d59c

  
Dropping
MD5 8d196b6f2687b1b6d034cd6d63d2bd37
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 eb105b408d5010f2bb82c8d5960af3303e96e7fd64d7777263d475c351b6d59c

Comments