MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f10321227a8b86c822a82e18ca501c6a45b3919cb0929335e849d00f0fbab4ec. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: f10321227a8b86c822a82e18ca501c6a45b3919cb0929335e849d00f0fbab4ec
SHA3-384 hash: 9c3ea55f1b528ddfc3ede1f66a64e225ed680b52b4b34e67651d960abdf6368f7eb35a2d03323b89e5d947d42db17388
SHA1 hash: c391a5edf9778cb425af4512dc9977c4a03592f3
MD5 hash: e5abbe03fd375a9033b3327ca6f63030
humanhash: foxtrot-friend-magazine-moon
File name:JQUJHQPL4943.vbs
Download: download sample
File size:1'507'003 bytes
First seen:2020-03-29 19:37:42 UTC
Last seen:Never
File type:Visual Basic Script (vbs) vbs
MIME type:text/plain
ssdeep 12288:rlPSTbLrKS0qcW2WopG+VubXi7GmE8BiaZ6x+N8IuVemHqCtXXrHSPL58jdAKlZy:Hcc
TLSH 316570CB57F75A44E3EB7FC412852106B778528D85E99E03C0A83B2D675898EFAF1318
Reporter Racco42
Tags:dropper vbs

Intelligence

File Origin
# of uploads :
1
# of downloads :
322
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25834.JsHeur.UNOFFICIAL
Create hunting rule

Porcupine.Malware.36555.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Script-VBS.Trojan.Generic
Create hunting rule
Status:
Malicious
First seen:
2020-03-29 20:35:29 UTC
File Type:
Text (VBS)
AV detection:
4 of 47 (8.51%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Visual Basic Script (vbs) vbs f10321227a8b86c822a82e18ca501c6a45b3919cb0929335e849d00f0fbab4ec

(this sample)

Gozi

DLL dll 4ca3ae0f9b573739e66192f15aade1cf3d409ef133a7b6834ad4e387dea498a5

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 4ca3ae0f9b573739e66192f15aade1cf3d409ef133a7b6834ad4e387dea498a5

Comments