MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 304fb371fe82d75f79f5cdcb41bafa7e55561120fbce7d0e84c8da13093be433. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 4
| SHA256 hash: | 304fb371fe82d75f79f5cdcb41bafa7e55561120fbce7d0e84c8da13093be433 |
|---|---|
| SHA3-384 hash: | 12b6381bee729f7da5292a865c30879181b538f3a84e30591bdfea29718187bf424a0cdfeb54faeaf953faab114f3532 |
| SHA1 hash: | 571a55b9009ddaa104e41a46d876eed6621119f3 |
| MD5 hash: | ce88e83885f0fb5d58c7a21f6f665399 |
| humanhash: | floor-william-lactose-hydrogen |
| File name: | PO110629.zip |
| Download: | download sample |
| File size: | 643'629 bytes |
| First seen: | 2020-08-05 06:30:09 UTC |
| Last seen: | 2020-08-12 10:02:00 UTC |
| File type: | zip |
| MIME type: | application/zip |
| ssdeep | 12288:Rcd4Xz11SdV+9jMmlF7P9bftS224NDwFXDEbxo2NkYjenUy6fVRbThQd:20zjv9wm7Ppw34NDrdo2N9eviVXc |
| TLSH | 06D423AD78B7753AB1D03FFC57FC9A2A11765E5C0BAB8537607800B8CAB8FA10495360 |
| Reporter |  abuse_ch |
| Tags: | zip |
abuse_ch
Malspam distributing unidentified malware:HELO: suntech-power.com
Sending IP: 95.211.253.210
From: Yaru Wen <Yaru.Wen@suntech-power.com>
Subject: RE: Enquiry [Purchase Order]
Attachment: PO110629.zip (contains "PO110629.exe")
Intelligence
File Origin
# of uploads :
2
# of downloads :
58
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Status:
Malicious
First seen:
2020-08-04 20:22:41 UTC
File Type:
Binary (Archive)
Extracted files:
7
AV detection:
22 of 29 (75.86%)
Threat level:
5/5
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.56
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
zip 304fb371fe82d75f79f5cdcb41bafa7e55561120fbce7d0e84c8da13093be433
(this sample)
exe Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.