MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e9875862100e8139635304c979112a013720c05a7c39f43f2f416a8a0153544a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: e9875862100e8139635304c979112a013720c05a7c39f43f2f416a8a0153544a
SHA3-384 hash: be61534ba9b3abd3df426b7b8d3711eaec00b25e3b804be79f7f9d80d74d395529ec68b43562b2df1bc977b256300eb2
SHA1 hash: 81aed09ea4df4043fc260c3a36cf6669aeba98cb
MD5 hash: 371bb3f5244af17c103d1029ca4611b7
humanhash: west-sad-alaska-seven
File name:SHIPPING DOCUMENTS 017726354.gz
Download: download sample
File size:256'138 bytes
First seen:2020-08-18 11:11:01 UTC
Last seen:Never
File type: gz
MIME type:application/gzip
ssdeep 6144:bwzqM4ux99s6+AI2t594Tb5krSXnWSsQr9gB9ys:rM4MfSAI2P+Tb5FXWugv
TLSH 814423CADDE2BD00CE11E43FED550F8BF8E28AB9873BAD4F4B463279650711A9245C19
Reporter abuse_ch
Tags:DHL gz


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: mail.sportscity.com.kh
Sending IP: 116.206.18.99
From: DHL Express Shipping <rhodora@sportscity.com.kh>
Subject: Shipping Documents (Reminder)
Attachment: SHIPPING DOCUMENTS 017726354.gz (contains "SHIPPING DOCUMENTS 017726354.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
56
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/e9875862100e8139635304c979112a013720c05a7c39f43f2f416a8a0153544a/
Threat name:
ByteCode-MSIL.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2020-08-18 11:12:13 UTC
AV detection:
15 of 48 (31.25%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=5gdvqyqqb2atsy2tatexsejkae3sbqc2pq47ipzpifviuaktkrfa._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

gz e9875862100e8139635304c979112a013720c05a7c39f43f2f416a8a0153544a

(this sample)

Executable exe 9da1772fa2628569f0c6ccb0d44b1caf275a13e99421014da49a161f13d57265

  
Dropping
MD5 371e19a26ecf9d6d2a94c4d0a97798b3
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 9da1772fa2628569f0c6ccb0d44b1caf275a13e99421014da49a161f13d57265

Comments