MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 0fc9c645410cf0de5fe32a13c1c6e5628cbf3716843173d20e54bab0a6605758. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 2
| SHA256 hash: | 0fc9c645410cf0de5fe32a13c1c6e5628cbf3716843173d20e54bab0a6605758 |
|---|---|
| SHA3-384 hash: | 7279c1763f95ed03f229849aa3bd09ac9d68ad6cb32e910c2433ab0543399e96a17106755a89336ad833f1ef6e3bbc2f |
| SHA1 hash: | 006b0a4a5c2086e0ce8a1a1b892491963541188d |
| MD5 hash: | 2606eb3785b9639ce3fce6caf22f6d3e |
| humanhash: | chicken-angel-apart-network |
| File name: | IncomingMailUs.jar |
| Download: | download sample |
| File size: | 461'590 bytes |
| First seen: | 2020-06-09 10:59:19 UTC |
| Last seen: | 2020-06-10 19:12:17 UTC |
| File type: |  jar |
| MIME type: | application/java-archive |
| ssdeep | 12288:ow3tjThDUgU4XcIeFoMUxokFDaCQGhZ+nevtGHw5a:ow1jLXcxFMokFmy+nevtD5a |
| TLSH | 34A42331D9C144AFD9BFA6F020393264FB6621712A8EE6E3E9662F940D70C244D5DEC7 |
| Reporter |  cocaman |
| Tags: | jar |
Intelligence
File Origin
# of uploads :
2
# of downloads :
68
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Gathering data
Threat name:
ByteCode-JAVA.Trojan.AdwindAC
Status:
Malicious
First seen:
2020-06-09 11:01:03 UTC
File Type:
Binary (Archive)
Extracted files:
29
AV detection:
15 of 29 (51.72%)
Threat level:
5/5
Result
Malware family:
n/a
Score:
1/10
Tags:
n/a
Behaviour
Suspicious use of SetWindowsHookEx
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Delivery method
Distributed via e-mail link
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.