🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3656925f16d5fb5e1e1ad82d96c270935ff4cc65a3ced68fa6896efffbbc01ea. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Lazarus


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments

SHA256 hash: 3656925f16d5fb5e1e1ad82d96c270935ff4cc65a3ced68fa6896efffbbc01ea
SHA3-384 hash: 13a90414afb86a3f7168e480ecb0794e9710be28d88a873086c059dbe9926f661f657626d8d0a9b68ceb0ec1fc146c8b
SHA1 hash: 557093d5b4ce2b49aeea4c41c21e3d5ce102466b
MD5 hash: cace67b3ea1ce95298933e38311f6d0b
humanhash: snake-fish-early-batman
File name:3656925f16d5fb5e1e1ad82d96c270935ff4cc65a3ced68fa6896efffbbc01ea.bin
Download: download sample
Signature Lazarus
File size:1'318'050 bytes
First seen:2021-03-22 13:38:59 UTC
Last seen:Never
File type:unknown
MIME type:application/octet-stream
ssdeep 24576:/c7PkM/9H2aORF18P/vhPvCm/u/hkzYXkb80HbKWfcKSI1tFu/GRUzbpAKFNFMY:kVH2RRw3MhKb8GgKUzbqK/WY
TLSH AD55330550877F42F4763FBF65F1981675A810F8A6A637AEF68884C437CAC83C392B58
Reporter Arkbird_SOLG
Tags:apt Lazarus maldoc

Intelligence


File Origin
# of uploads :
1
# of downloads :
184
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
Document-Office.Downloader.Heuristic
Status:
Malicious
First seen:
2020-10-08 19:47:04 UTC
AV detection:
1 of 29 (3.45%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments