MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2060fb6fe904c2ae29874dbbbd031db657678f10b735778e882bb44a85411368. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	2060fb6fe904c2ae29874dbbbd031db657678f10b735778e882bb44a85411368
SHA3-384 hash:	64a15dbe541939a077366c2b2bfc51252bf301abaa29f822d432845347250151a8da9a888fff8b20f92f8a74e867cdfe
SHA1 hash:	904c025ea018c5b98cb96a374cca7354b834e1be
MD5 hash:	db87674a18fe8a0aa88e56da7d7d5a1f
humanhash:	golf-fourteen-steak-twelve
File name:	lnvoice_1882936796.pdf
Download:	download sample
File size:	65'843 bytes
First seen:	2023-09-03 08:27:48 UTC
Last seen:	Never
File type:	pdf
MIME type:	application/pdf
ssdeep	768:EmPJfVsEuFTvFxctbf1ppppppppppppppppob+bB44O:tdsTFTsF9pppppppppppppppg
TLSH	T1BC53E371F3C7E388974B59AE96FD3C3B874168C400C49057983B8CD5A5A6F368987ABC
Reporter	JAMESWT_WT
Tags:	booking-com-details-blogspot-com MEMEMAN pdf

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

391

Origin country :

IT

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

Porcupine.Phishing.162260.UNOFFICIAL

Alert

Create hunting rule

DocGuard Malicious

Result

Verdict:

Malicious

File Type:

PDF File

Link:

https://app.docguard.net/2060fb6fe904c2ae29874dbbbd031db657678f10b735778e882bb44a85411368/results/dashboard

Hybrid Analysis Trojan.PDF.Meme

Verdict:

Malicious

Labled as:

Trojan.PDF.Meme

Link:

https://www.hybrid-analysis.com/sample/2060fb6fe904c2ae29874dbbbd031db657678f10b735778e882bb44a85411368

inlyse Malware.AI Malicious

Label:

Malicious

Suspicious Score:

5.4/10

Score Malicious:

55%

Score Benign:

45%

Link:

https://www.malware.ai/gui/files/?id=a0daa9e8-7df7-4c36-810c-161e4dc69473

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1302377

Signature

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/2060fb6fe904c2ae29874dbbbd031db657678f10b735778e882bb44a85411368/

ReversingLabs TitaniumCloud Document-PDF.Trojan.Heuristic

Threat name:

Document-PDF.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2023-09-02 18:56:05 UTC

File Type:

Document

Extracted files:

12

AV detection:

13 of 24 (54.17%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ebqpw37jatbk4kmhjw532ay5wzlwpdyqw42xpduifo2evbkbcnua._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.25

Link:

https://yomi.yoroi.company/submissions/2060fb6fe904c2ae29874dbbbd031db657678f10b735778e882bb44a85411368