MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 def66c779922c315bf4bf0e9d872bc1a1204407f7e17d3c0a7a9572ea0acbf9f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 3
| SHA256 hash: | def66c779922c315bf4bf0e9d872bc1a1204407f7e17d3c0a7a9572ea0acbf9f |
|---|---|
| SHA3-384 hash: | 52cabb116694be2986a548fd6dc517e84a8f449e51416ebe825a1ce4e0944d37e98dd353cc877475238fd9f967f0d0c1 |
| SHA1 hash: | 52a75d93fc2e652850fbe39aef2deda49942b19a |
| MD5 hash: | 4dc99d6b5dbf6825d5831bb8c66fe2ba |
| humanhash: | hot-triple-georgia-hawaii |
| File name: | Final_Invoices_For_Payment_Fairmont_Shipping_pdf.gz |
| Download: | download sample |
| File size: | 123'007 bytes |
| First seen: | 2020-06-02 08:31:11 UTC |
| Last seen: | Never |
| File type: | zip |
| MIME type: | application/zip |
| ssdeep | 1536:UWtPScpXfQ9Y0xfkj2e6XSlsfI2eFlVbuZwxjPWt9o2aCZG46VUNzOqI/vIu5w0C:Rlmu2kfSZ3t9o2pGrUQqInh5vCFUErt |
| TLSH | DAC3125AD6C62331EEA596AC624EF20A49483FFED5C2B35441C3C1B2AB64E33DD17076 |
| Reporter |  abuse_ch |
| Tags: | gz |
abuse_ch
Malspam distributing unidentified malware:HELO: mail.cesosenintl.ml
Sending IP: 64.188.23.5
From: Fairmont Shipping (HK) Ltd. <amyhong@fairmontshipping.com>
Subject: Declined Final Bank Payment
Attachment: Final_Invoices_For_Payment_Fairmont_Shipping_pdf.gz (contains "Final_Invoices_For_Payment_Fairmont_Shipping_pdf.exe")
Unknown malware C2:
http://coroheus.ml/roksone/logs.php
Intelligence
File Origin
# of uploads :
1
# of downloads :
58
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Occamy
Status:
Malicious
First seen:
2020-06-02 08:36:44 UTC
AV detection:
24 of 48 (50.00%)
Threat level:
2/5
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
zip def66c779922c315bf4bf0e9d872bc1a1204407f7e17d3c0a7a9572ea0acbf9f
(this sample)
exe Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.