MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 21c343d53ab812181a4bbe4d0da2d107b02f745c29a5e330950fb89c4d0654ba. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 21c343d53ab812181a4bbe4d0da2d107b02f745c29a5e330950fb89c4d0654ba
SHA3-384 hash: f57acb9cdf7818a6f971477b6d3786b42347d1660676b0f971cde085b8aee3628b3ca9569abcf39551e48576544e069b
SHA1 hash: fc2538cc7bc1753928e7d10929703e3e8cc948e2
MD5 hash: 9dd2550d9ca40e415dc7ef8e411ee5eb
humanhash: yankee-tennessee-uranus-bulldog
File name:DEE BEE ENTERPRISE.zip
Download: download sample
File size:809'368 bytes
First seen:2020-08-18 10:58:36 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 24576:NcPhkzmmVYLkfIh6Xg7l9pULQKALE1hkb:NcPhkmmiIdw7lgkKALE7kb
TLSH 780533B3DDB270659EBFF7543D207A14F16ABE83D8D56308103570A608B9B359E1B38A
Reporter abuse_ch
Tags:zip


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: piramal.com
Sending IP: 103.99.1.149
From: "AVIJIT AS SHUKLA" <avijit.shukla@piramal.com>
Subject: RE: PO No : 1100048849 Dated : 21.05.2020 , DEE BEE ENTERPRISE
Attachment: DEE BEE ENTERPRISE.zip (contains "DEE BEE ENTERPRISE.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
59
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/21c343d53ab812181a4bbe4d0da2d107b02f745c29a5e330950fb89c4d0654ba/
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-08-18 11:00:07 UTC
AV detection:
20 of 29 (68.97%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=ehbuhvj2xajbqgslxzgq3iwra6yc65c4fgs6gmevb64jytigks5a._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

zip 21c343d53ab812181a4bbe4d0da2d107b02f745c29a5e330950fb89c4d0654ba

(this sample)

Executable exe 2cfe3ffadc27ccca8b9258dfe727dbfbf1ea086b89f5d75d5e3bc2c86d6175a0

  
Dropping
MD5 e6c94970b48baa0e136a0b506a8b6537
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 2cfe3ffadc27ccca8b9258dfe727dbfbf1ea086b89f5d75d5e3bc2c86d6175a0

Comments