MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2ac9c385f5852c08c90c563f3cd7aced100841d1dda5246f99c5c78b3b15515a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 2ac9c385f5852c08c90c563f3cd7aced100841d1dda5246f99c5c78b3b15515a
SHA3-384 hash: 1506f8976316b964a1372f740dfdca6e6eed57b97e994919c88716ca8db8db981f7d07a875229896fa8a95b95f02ccb8
SHA1 hash: 01bb1f5a40c829541dd386857c1b5301dc78779c
MD5 hash: 1349943cba70aec88025096d7067846c
humanhash: washington-apart-robin-double
File name:Order # Nr.PO_2014100.pdf
Download: download sample
File size:1'617'770 bytes
First seen:2020-10-23 06:38:01 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 24576:dfv8ddRMfJTJ4JOYbkq/jjQtmAoQPLY4aLlz7oopg8VzWFoeeM2YMoPIq/:Vudmf8ym2Ps9LhcovzWKZRaIo
TLSH 4F7533E00F2781073B3C054934D9617DD9DA52E18AB5A8B096E5FECDB433A3998CE277
Reporter abuse_ch
Tags:pdf


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: bay0.demin-logistics.com
Sending IP: 185.132.53.5
From: Willcox Jobs <info@demin-logistics.com>
Subject: New PoNo#_201410
Attachment: Order # Nr.PO_2014100.pdf (contains "Order # Nr.PO_2014100.pdf.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
158
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/2ac9c385f5852c08c90c563f3cd7aced100841d1dda5246f99c5c78b3b15515a/
Threat name:
Win32.Trojan.NanoBot
Create hunting rule
Status:
Malicious
First seen:
2020-10-22 19:36:36 UTC
AV detection:
11 of 48 (22.92%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=fle4hbpvquwarsimky7tzv5m5uiaqqor3wssi34zyxdywoyvkfna._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

rar 2ac9c385f5852c08c90c563f3cd7aced100841d1dda5246f99c5c78b3b15515a

(this sample)

Executable exe bcee5b3f4acfc85f500a2edd23402b92b87bca11263ffc3ef31f8c0a6c31f6a6

  
Dropping
MD5 ac8607c09d55d0135c69a2d3d20ebb32
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 bcee5b3f4acfc85f500a2edd23402b92b87bca11263ffc3ef31f8c0a6c31f6a6

Comments