MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 00edd8d0eb68531ab5142741832ef816a8a2214144be82a907c90fab5585de82. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 00edd8d0eb68531ab5142741832ef816a8a2214144be82a907c90fab5585de82
SHA3-384 hash: a074626a782265a02378936ed81f0986a5b04d9c396d4866b354b260f1f12409b07977f4c9f44ef336a418095a80a7e3
SHA1 hash: a25dc1df6af79eb839a32023583f1fa321e6f174
MD5 hash: f0cc8521fe22a1941419da4d89366f34
humanhash: dakota-mars-robin-undress
File name:SWIFT09775527743pdf.z
Download: download sample
File size:1'787'194 bytes
First seen:2021-01-04 18:03:22 UTC
Last seen:Never
File type: z
MIME type:application/x-rar
ssdeep 49152:IK6RYZX0EGieAE0nia2FNzrTFPnOytMgpeHRr2jqIXgRW:NGixgFNtJMgpkyjqIXgQ
TLSH C485334A673C824C19A14751C3B334E50F5B61D8AB5D8E3DF5E00EAA3AEE3B1BC5D285
Reporter abuse_ch
Tags:z


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: host30.ssl-net.net
Sending IP: 213.145.224.180
From: Lin Zhu <purchase@essencis.com>
Subject: FW: Swift copy
Attachment: SWIFT09775527743pdf.z (contains "SWIFT09775527743pdf.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
99
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
SUSPICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/00edd8d0eb68531ab5142741832ef816a8a2214144be82a907c90fab5585de82/
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=adw5ruhlnbjrvniue5ayglxyc2ukeikbis7ifkihzeh2wvmf32ba._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/00edd8d0eb68531ab5142741832ef816a8a2214144be82a907c90fab5585de82

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

z 00edd8d0eb68531ab5142741832ef816a8a2214144be82a907c90fab5585de82

(this sample)

Executable exe 0bd437789c9fbcd602cf9683800b11ed80bc6b8ba8f68cf6c5ced137a0bedbd2

  
Dropping
MD5 22a5c2511ebad9f193acce1e8797dd45
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 0bd437789c9fbcd602cf9683800b11ed80bc6b8ba8f68cf6c5ced137a0bedbd2

Comments