MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 1bd63922c7862bc47b6a147da86c2637989003cb88b5bae3654ee92f717b4899. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 3
| SHA256 hash: | 1bd63922c7862bc47b6a147da86c2637989003cb88b5bae3654ee92f717b4899 |
|---|---|
| SHA3-384 hash: | b8adc3b6c0862e34a8597be84366d8ec5350c11d8265ce1078870a3be7cb29c66052717c21d96588adf9662d6d553b3d |
| SHA1 hash: | 92decd62cbc94fd08c5a6760e480a25e1dfad0c0 |
| MD5 hash: | 3d6a23c4375a5e8d1395f581e7140918 |
| humanhash: | leopard-pasta-one-early |
| File name: | Screenshot0091.lha |
| Download: | download sample |
| File size: | 19'309 bytes |
| First seen: | 2020-10-13 12:27:53 UTC |
| Last seen: | Never |
| File type: | zip |
| MIME type: | application/zip |
| ssdeep | 384:OYz7hiNDPwgzbtyQ8+7mee66msxcJPegCCt8RnQjKWDVTynIi/ouQV:O+h2D0Q8+7mee66mpJv8x5WxunIi/k |
| TLSH | 9D82E049FB20783811C4377736BE4934364338F7C64C2326363B4A1BD9663AA9F151D2 |
| Reporter |  abuse_ch |
| Tags: | Hostwinds lha |
abuse_ch
Malspam distributing unidentified malware:HELO: hwsrv-785563.hostwindsdns.com
Sending IP: 192.255.235.153
From: Peter Bruns <peter.bruns.kwb.eu@mail.ru>
Subject: RE: KWB OUTSTANDING ORDERS
Attachment: Screenshot0091.lha (contains "Screenshot0091.exe")
Intelligence
File Origin
# of uploads :
1
# of downloads :
96
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
zip 1bd63922c7862bc47b6a147da86c2637989003cb88b5bae3654ee92f717b4899
(this sample)
exe Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.