MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 22ac35f2d72b2dc4639020565c7f91d35ee633604d6055b24bba5b06c0cdc919. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 3
| SHA256 hash: | 22ac35f2d72b2dc4639020565c7f91d35ee633604d6055b24bba5b06c0cdc919 |
|---|---|
| SHA3-384 hash: | 0c52030ea196e9fd7ce4446c72f12816c3d752d049bab640ce226ef022aed7f2d8ec76cd50b37476367eced4ec7bbf26 |
| SHA1 hash: | 5399b88f51616d879ad453f20f454ae780d8e9ec |
| MD5 hash: | 7033e73400c0f1022d4bbf4fb85e5393 |
| humanhash: | helium-two-carolina-kilo |
| File name: | certificate Insurance attachment.pdf.z |
| Download: | download sample |
| File size: | 14'298 bytes |
| First seen: | 2021-02-24 07:02:03 UTC |
| Last seen: | Never |
| File type: | z |
| MIME type: | application/x-rar |
| ssdeep | 384:ahOkIDkpsOekCnXDOWqDdfVOroWcTS71KMq/eUhzrBH:aTHpsbkC3qCFcTeMbzV |
| TLSH | 6552CF4456C3B4C45B8750E63C5DD5BFFF524C9A82F37BE91078E5E8D9860E830294DA |
| Reporter |  abuse_ch |
| Tags: | Endurance z |
abuse_ch
Malspam distributing unidentified malware:HELO: gateway33.websitewelcome.com
Sending IP: 192.185.146.119
From: Kamonwan@g4si.com
Subject: Certificate of insurance
Attachment: certificate Insurance attachment.pdf.z (contains "Fireman.exe")
Intelligence
File Origin
# of uploads :
1
# of downloads :
85
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
ByteCode-MSIL.Downloader.BaseLoader
Status:
Malicious
First seen:
2021-02-24 07:02:09 UTC
AV detection:
13 of 47 (27.66%)
Threat level:
3/5
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
z 22ac35f2d72b2dc4639020565c7f91d35ee633604d6055b24bba5b06c0cdc919
(this sample)
exe Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.