MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 dd5fd78e88dda2fc819c0a568ac9dbc9e6a28ac519779ac89824969cfe5c18d3. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


NanoCore


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: dd5fd78e88dda2fc819c0a568ac9dbc9e6a28ac519779ac89824969cfe5c18d3
SHA3-384 hash: 644d9839ed1e95151b42adff017853bd27ad7d29c430a5e9954226638bee8d1ca618682ceb23603ba7497a7aae383fa1
SHA1 hash: baf0ba370914cf3409546fe5252a7182de460db5
MD5 hash: 31263c7011f0da6261cecaffee0ddfed
humanhash: spaghetti-bacon-earth-three
File name:DHL-#AWB130501923096PDF.rar
Download: download sample
Signature NanoCore
Create hunting rule
File size:289'432 bytes
First seen:2020-06-23 06:16:41 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 6144:vjFiVoAYwhEhQvDzH37mMOqiQPD4+k3Frvm23AacoPzoyhVdXSAQuU2AjK:vNwhEhQrFsZw2wacszoyhzSzuUK
TLSH B254236EAEDEBE734C0818ABB71827D79F0329E5B67C761D6831193DC85C9845087E32
Reporter jarumlus
Tags:NanoCore

Intelligence

File Origin
# of uploads :
1
# of downloads :
68
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/dd5fd78e88dda2fc819c0a568ac9dbc9e6a28ac519779ac89824969cfe5c18d3/
Threat name:
ByteCode-MSIL.Backdoor.NanoCore
Create hunting rule
Status:
Malicious
First seen:
2020-06-23 03:31:39 UTC
AV detection:
19 of 31 (61.29%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=3vp5pdui3wrpzam4bjlivso3zhtkfcwfdf3zvseyesljz7s4ddjq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

NanoCore

rar dd5fd78e88dda2fc819c0a568ac9dbc9e6a28ac519779ac89824969cfe5c18d3

(this sample)

NanoCore

Executable exe a632cd6bc107958c36a9ad58f16afbc3b6e0fdc31fa6d7147a5e0538518351ad

  
Dropped by
NanoCore
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 a632cd6bc107958c36a9ad58f16afbc3b6e0fdc31fa6d7147a5e0538518351ad
  
Dropping
MD5 2d4e6271bd3535dca24d4bfcef8f8775

Comments