MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 056bb7b73c5643233f3e5768e46aef41baa7b1d5916f65e427207f78fa08e180. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	056bb7b73c5643233f3e5768e46aef41baa7b1d5916f65e427207f78fa08e180
SHA3-384 hash:	b1243a7d8aa64566c866ce72a26917c34f7730f642ec13cb483a2387f795ded7b3381f673d52d6ff72ad0cdf37555546
SHA1 hash:	f961fe407b8ff3e6a4fe8f468da91dc668b19fac
MD5 hash:	7f33176a5930ee1071f25cad9efad283
humanhash:	indigo-california-apart-moon
File name:	002-NOTIFICACIONES FISCALES Y PROCESOS PENDIENTES_unique_M7Q60NY6_20241114_143812.pdf
Download:	download sample
File size:	90'805 bytes
First seen:	2024-11-18 08:00:43 UTC
Last seen:	Never
File type:	pdf
MIME type:	application/pdf
ssdeep	1536:y5cCIRiBjc9bKyVboBKj7mw1UigU6aS4zJ6SlaPa7/GPGcFXRay:JCiiBjcfu4/mArjV6HaiPGcFXgy
TLSH	T1A293F134FF5A4C9CFE03C27965383C9A9AAE725E88C4748B01B98F6370459994D236DF
Magika	pdf
Reporter	JAMESWT_WT
Tags:	48D1F84EF enviodolares24-duckdns-org pdf

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

290

Origin country :

IT

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.FileRepMalware.10757.1950.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

89.3%

Link:

https://cyber-fortress.com/docs/result/index.php?id=673af50980d21948b032407d

Tags:

virus agent

DocGuard Suspicious

Result

Verdict:

Suspicious

File Type:

PDF File

Link:

https://app.docguard.net/056bb7b73c5643233f3e5768e46aef41baa7b1d5916f65e427207f78fa08e180/results/dashboard

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  2.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/673af443aec40b7c5c476196/reports/29ad1a82-0213-48d1-8085-8672888a7b0b/overview

Hybrid Analysis PDF/TrojanDownloader.Agent

Verdict:

Malicious

Labled as:

PDF/TrojanDownloader.Agent

Link:

https://www.hybrid-analysis.com/sample/056bb7b73c5643233f3e5768e46aef41baa7b1d5916f65e427207f78fa08e180

inlyse Malware.AI Benign

Label:

Benign

Suspicious Score:

3.5/10

Score Malicious:

35%

Score Benign:

65%

Link:

https://www.malware.ai/gui/files/?id=62f91b9b-d96c-4ab5-a9c6-9b9ae22ec157

Joe Sandbox suspicious

Result

Threat name:

n/a

Detection:

suspicious

Classification:

troj

Score:

21 / 100

Link:

https://www.joesandbox.com/analysis/1557435

Signature

Uses known network protocols on non-standard ports

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

72%

Verdict:

Malware

File Type:

PDF

Link:

https://malprob.io/report/056bb7b73c5643233f3e5768e46aef41baa7b1d5916f65e427207f78fa08e180

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/056bb7b73c5643233f3e5768e46aef41baa7b1d5916f65e427207f78fa08e180/

ReversingLabs TitaniumCloud Document.Trojan.Heuristic

Threat name:

Document.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2024-11-18 08:01:05 UTC

File Type:

Document

Extracted files:

11

AV detection:

2 of 38 (5.26%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=avv3pnz4kzbsgpz6k5uoi2xpig5kpmovsfxwlzbheb7xr6qi4gaa._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.