MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f8f4a773ab88027e5d32e6d158ff9cafc1dc9107c0850a4e846bed57b59b7d01. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: f8f4a773ab88027e5d32e6d158ff9cafc1dc9107c0850a4e846bed57b59b7d01
SHA3-384 hash: 4df7c646352b621bbfacf6ae470ce6180f41cff86674d07d8604fc7e5420d45c3fb225715af3289b647f6f8367ed4cdb
SHA1 hash: 9eded5b6937b6693ae64f4dd619c32f9fd868d2c
MD5 hash: 718b314a8e85987a951fb9a3ac4966a5
humanhash: may-social-mike-april
File name:01004218200.zip
Download: download sample
File size:464'818 bytes
First seen:2020-08-18 11:12:51 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:YGeOcXuHdW2r2dhhvyKXxlOwS2X03E1hizNpRnTezBCnG7WNttkbjJpoztuckmCo:fce9nEhvyKXxoR2XnzwRnwCG74GUqe+2
TLSH 4FA4230059D520884564CAF2AADC081FB7336FC364B46EAAB7EC1DC5E9F74582357CAE
Reporter abuse_ch
Tags:zip


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: srv.gruposafety.pt
Sending IP: 176.61.147.193
From: Consultations Transfers Exterior <ConsulTranExte@bcp.com.pe>
Subject: ANAHUE CATUNTA ELIAS // Swift
Attachment: 01004218200.zip (contains "01004218200.exe")

Intelligence


File Origin
# of uploads :
1
# of downloads :
58
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
ByteCode-MSIL.Trojan.CryptInject
Status:
Malicious
First seen:
2020-08-18 09:38:46 UTC
AV detection:
27 of 48 (56.25%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

zip f8f4a773ab88027e5d32e6d158ff9cafc1dc9107c0850a4e846bed57b59b7d01

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments