MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 dd6071308b371480a06756b9818eae6ebce1341bdeb6c425521642a1f3d889ed. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: dd6071308b371480a06756b9818eae6ebce1341bdeb6c425521642a1f3d889ed
SHA3-384 hash: 859ec98547e5c4fdad93bc27c621401269c55f989517c2ab61711d4afc0c6e9961fcaa7ada2e1da1b13bf6cf7ceb5d51
SHA1 hash: 487880e7707aea0202c9f60d60e0d494fb206b5c
MD5 hash: 5623d2dbf4693fe1d34dbb84f03f8d84
humanhash: steak-uniform-xray-uranus
File name:PDF45678934.rar
Download: download sample
File size:418'421 bytes
First seen:2020-08-18 07:41:32 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:Hc31qj9Yh5g7tOz/QjDu1IstCii6K/QygHK4aLlaETk:qqju5sOUjD3sdxSr+QsETk
TLSH 069423AC2EE2DC47E755F8154B462BC2D54DC9962BB1C3C4939A0D3A40B34CAADDE613
Reporter abuse_ch
Tags:rar


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: harsco.com
Sending IP: 193.142.59.10
From: Anita Marquel <info@harsco.com>
Subject: Items Description for Quote
Attachment: PDF45678934.rar (contains "PDF45678934.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
66
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/dd6071308b371480a06756b9818eae6ebce1341bdeb6c425521642a1f3d889ed/
Threat name:
ByteCode-MSIL.Trojan.FormBook
Create hunting rule
Status:
Malicious
First seen:
2020-08-18 07:43:04 UTC
AV detection:
12 of 48 (25.00%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=3vqhcmelg4kibidhk24yddvon26ocna3323mijksczbkd46yrhwq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

rar dd6071308b371480a06756b9818eae6ebce1341bdeb6c425521642a1f3d889ed

(this sample)

Executable exe d05ddf26b630675edbee36cba07cd0db94c645c4685a1c533b3a025c7a9669e4

  
Dropping
MD5 663b331026bacbd60b0c467626f062ba
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 d05ddf26b630675edbee36cba07cd0db94c645c4685a1c533b3a025c7a9669e4

Comments