MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 293b80cce3801af10dac2fe5f029465fe1fcfde6f9eae4b8b147b92b1b65cf31. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



HawkEye


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments

SHA256 hash: 293b80cce3801af10dac2fe5f029465fe1fcfde6f9eae4b8b147b92b1b65cf31
SHA3-384 hash: f3c1991f76c28543c15f82d68e8b656ed263f1454f990cbb394c3aadd9833d2fb9941840332d4edca8d371c9160b97d2
SHA1 hash: 3a3a4c09408f9a3542777fa8fc49dec2953c9ef3
MD5 hash: 7800db25fb285640859d0885a3fbcd2b
humanhash: summer-papa-floor-two
File name:Payment.pdf.z
Download: download sample
Signature HawkEye
File size:617'623 bytes
First seen:2020-05-25 13:33:00 UTC
Last seen:Never
File type: z
MIME type:application/x-rar
ssdeep 12288:rG6sxXMD6xaXpKsAJIKj0B0hSbGbn645P+1Mlg2yFE:rG6sxcD6xJFjWcSbGD7+ysE
TLSH 16D4235F433AF5B1A52F895691E7029B94C8126CC91DC3C8F2B1C780F91EA74D3DACA9
Reporter jarumlus
Tags:HawkEye

Intelligence


File Origin
# of uploads :
1
# of downloads :
70
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Status:
Malicious
First seen:
2020-05-25 13:36:43 UTC
File Type:
Binary (Archive)
Extracted files:
8
AV detection:
28 of 48 (58.33%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

HawkEye

z 293b80cce3801af10dac2fe5f029465fe1fcfde6f9eae4b8b147b92b1b65cf31

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments