MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1192d36db6ee18c2b4ef546202fdbad91ece2939a216be5c2cd0863260dd5452. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	1192d36db6ee18c2b4ef546202fdbad91ece2939a216be5c2cd0863260dd5452
SHA3-384 hash:	1670a8f3c011168406c7b52402154983d1d327807a73a7501e93aef5bc67ce8eaff9ceefaffb79b24058d9067ed774e5
SHA1 hash:	8f41bb0c1a0710988cfbdbe04b0ccd86e4afb554
MD5 hash:	1d7ca389734050df5cafe5e8d9b08e2e
humanhash:	salami-washington-music-whiskey
File name:	BFGJ1268_2933836.zip
Download:	download sample
Signature	IcedID Alert Create hunting rule
File size:	366'522 bytes
First seen:	2023-10-11 23:28:47 UTC
Last seen:	Never
File type:	zip
MIME type:	application/zip
Note:	This file is a password protected archive. The password is: W1289
ssdeep	6144:LOnE2KoaC2F7YUPOrXT5C6OSOfEoHYEs0RNPgnCt3Up3AyNotXvY7Z6iEm/ch/q3:yEjCkYPrXTc6QsYr8gfl/EYNmEhCiUYM
TLSH	T1FD7423C643D718262A241137EB597E08BE25F162B92FD9F75432BD230B256C16EF8E12
TrID	80.0% (.ZIP) ZIP compressed archive (4000/1) 20.0% (.PG/BIN) PrintFox/Pagefox bitmap (640x800) (1000/1)
Reporter	JAMESWT_WT
Tags:	gestionhqse-com IcedID p-W1289 pw-W1289 zip

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

184

Origin country :

IT

File Archive Information

This file is a password protected archive. The password is: W1289

This file archive contains 2 file(s), sorted by their relevance:

Relevant files 2

File name:	readme[2023.10.11_08-07].txt
File size:	157 bytes
SHA256 hash:	a9a4c93da588cb2c6fc547ccbe7ef7811db0264897a60b84ac1ec4f23d57c000
MD5 hash:	5789c40ea582e3196544d7909ad0b557
MIME type:	text/plain
Signature	IcedID

File name:	Offer[2023.10.11_08-07].vbs
File size:	1'037'155 bytes
SHA256 hash:	f3100825207882bc6014c3f5b1a168e5e0328e41869b2f360a3733da2e096e41
MD5 hash:	944ee5fac202cf47b1728a82be4ee674
MIME type:	text/plain
Signature	IcedID

Vendor Threat Intelligence

FileScan.io

Gathering data

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/1192d36db6ee18c2b4ef546202fdbad91ece2939a216be5c2cd0863260dd5452

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/1192d36db6ee18c2b4ef546202fdbad91ece2939a216be5c2cd0863260dd5452/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=cgjng3nw5ymmfnhpkrraf7n23epm4kjzuill4xbm2cddeyg5krja._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.