🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2b6dc1a826a4d5d5de5a30b458e6ed995a4cfb9cad8114d1197541a86905d60e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: 2b6dc1a826a4d5d5de5a30b458e6ed995a4cfb9cad8114d1197541a86905d60e
SHA3-384 hash: 0ca3a79dd70724f47028823d6846af35fe691e469082cbe1d59779590067a482fe0f2de40ec905d46116c864b8496bcf
SHA1 hash: cb1125d5a57a529bf88bf590c0cb675f37261839
MD5 hash: 1f1f44a01d5784028302d6ad5e7133aa
humanhash: pasta-skylark-neptune-delaware
File name:iec56w4ibovnb4wc.onion_Library__DPRK__BabyShark__Oct_Bld_full_view.docm.doc.malw
Download: download sample
File size:793'833 bytes
First seen:2020-03-18 21:56:45 UTC
Last seen:Never
File type:Word file doc
MIME type:application/vnd.openxmlformats-officedocument.wordprocessingml.document
ssdeep 12288:X7XvDxkHd1LDrcz5ucn+unF28cnzsl3suj/1MGWyxkgAPrwKd7c2Nb59pIqJVGTt:DvDxo/L0z5ucn+sIM9qGxkN/KMbCDrh
TLSH EFF423FD7875EA24F1E2D8BED3158170FD4A53C4894AA40BD509E78428292C2FDCB1F9
Reporter ov3rflow1
Tags:malw

Intelligence


File Origin
# of uploads :
1
# of downloads :
92
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Document-Word.Trojan.Sharby
Status:
Malicious
First seen:
2019-01-17 07:42:17 UTC
AV detection:
30 of 45 (66.67%)
Threat level:
  5/5
Verdict:
unknown
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

  
Delivery method
Other

Comments