MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 bbeb5cb3715bba304bc55e2721417e92421329a809cc9851f1daa5d88be8dac8. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: bbeb5cb3715bba304bc55e2721417e92421329a809cc9851f1daa5d88be8dac8
SHA3-384 hash: 72af94f540cf081ff779ace52ff67d3dbd7573dc11d71aea7727da49872493180f533c61b5f50b0d199fb1eee92eaefe
SHA1 hash: 776f458e7ce4a48248733bc9ff3a0f7fefd969f9
MD5 hash: 64e725202c545d7eb92254cb9102ee6b
humanhash: carbon-lithium-tennis-coffee
File name:payment advice_pdf.arj
Download: download sample
File size:260'665 bytes
First seen:2020-08-18 11:08:25 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:n7kA7FTutQGvmwUhOOvFAhAXDb3GrViXT0DozSZqb+:n7j7imwUoO9AMnG0XADoz0
TLSH 9A442300B59D8078EB9203F5FE39883AC5E1C6E8B88756CD39F0D7A7065ADD9B51B2D0
Reporter abuse_ch
Tags:arj


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: ck-pttuntex.id
Sending IP: 103.23.201.83
From: acct-dept@mtekmarine.com
Subject: Payment Copy - Tips Ref: [MT103]
Attachment: payment advice_pdf.arj (contains "payment advice_pdf.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
54
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25815.ZipHeur.BadExt.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/bbeb5cb3715bba304bc55e2721417e92421329a809cc9851f1daa5d88be8dac8/
Threat name:
ByteCode-MSIL.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2020-08-18 11:10:08 UTC
AV detection:
17 of 48 (35.42%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=xpvvzm3rlo5das6flytscql6sjbbgknibhgjqupr3ks5rc7i3lea._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

zip bbeb5cb3715bba304bc55e2721417e92421329a809cc9851f1daa5d88be8dac8

(this sample)

Executable exe 4ebab6676f91935e7d16e72b19543b818a6abfbf2b1e38e03afd7452644acd2e

  
Dropping
MD5 d772fc95adbce49e84f95cd036c57457
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 4ebab6676f91935e7d16e72b19543b818a6abfbf2b1e38e03afd7452644acd2e

Comments