MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 21b172ff1d0d882108da45ef228cd0fa32627066d53e7d460ea0894609599634. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 21b172ff1d0d882108da45ef228cd0fa32627066d53e7d460ea0894609599634
SHA3-384 hash: b918c4845158a74d706d9b074e9079327174e134636367b5678f12ff9d7b7ca9c6b83f317ab49e5b7d7dab3df65252b2
SHA1 hash: e2195e6ebf253404d5f6f5080df9659803a7dc16
MD5 hash: 10c606664e27274ce5fb2ad6ee69c5f3
humanhash: one-yankee-music-moon
File name:NEW ORDER 9876545678.zip
Download: download sample
File size:384'829 bytes
First seen:2020-08-13 04:26:36 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:c4fC79GN7F56o2OumCu7XxIDfq3Nfb/TpAURTKp56g91otDfx:c4fk90gBmCuWDfq1/TGURTKL6gP4x
TLSH 56842341C4DCE87B20EFDC16DBB609D122966C99BDB10C9F095D429A6C2AFCDB8DF460
Reporter cocaman
Tags:zip


Avatar
cocaman
Malicious email
From: Sales<sales@anusornproducts.com>
Received: from anusornproducts.com (unknown [212.83.46.93])
Date: 10 Aug 2020 15:48:15 -0700
Subject: NEW ORDER
Attachment: NEW ORDER 9876545678.zip

Intelligence

File Origin
# of uploads :
1
# of downloads :
58
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Malware.Speedingupmypc-6718419-0
Create hunting rule

Win.Virus.Tainp-1
Create hunting rule

Win.Malware.Cbgz-6743174-0
Create hunting rule

Win.Malware.Auopnspi-6887872-0
Create hunting rule

PUA.Win.Adware.Slugin-6803969-0
Create hunting rule

PUA.Win.Adware.Slugin-6840354-0
Create hunting rule

Win.Trojan.Agent-1372183
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/21b172ff1d0d882108da45ef228cd0fa32627066d53e7d460ea0894609599634/
Threat name:
Win32.Virus.Tapin
Create hunting rule
Status:
Malicious
First seen:
2020-08-13 04:28:06 UTC
File Type:
Binary (Archive)
Extracted files:
20
AV detection:
24 of 29 (82.76%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=egyxf7y5bwecccg2ixxsfdgq7izge4dg2u7h2rqouceumckzsy2a._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Grenam
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/21b172ff1d0d882108da45ef228cd0fa32627066d53e7d460ea0894609599634

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

zip 21b172ff1d0d882108da45ef228cd0fa32627066d53e7d460ea0894609599634

(this sample)

Executable exe 21c9724029e1b659d1b038844e6c76054d65bbd93fbd416bfe31a5449e835845

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 21c9724029e1b659d1b038844e6c76054d65bbd93fbd416bfe31a5449e835845

Comments