🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 367a15201aa2f5e4e0ce8eeb2db718504b653ca2c2d2dab61098b0d97536ada2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 367a15201aa2f5e4e0ce8eeb2db718504b653ca2c2d2dab61098b0d97536ada2
SHA3-384 hash: 4637664a57cc3c1d9fae4d08e211ddc843502b1012c5de70cafe0076402f5e7aa7e1a34c8c928462049a2b9634cbdeac
SHA1 hash: 2524d6a03bb9db87e52704583f8cad95ca5f0216
MD5 hash: dc66bdbec810326ec693517dcbd213b6
humanhash: spaghetti-network-social-pasta
File name:products order pdf.zip
Download: download sample
File size:330'904 bytes
First seen:2020-07-16 08:56:46 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:K09X2L1V2qu8IaQH7V+os36ghA0CLASTopVzI3KaRX9ZFH7pu19a0o:KE2L1V2qu8ObehuMSTop9c3H7pu4
TLSH 4264239E83B5C84B41694DADB0D27D52D224011CA9A9223DAE703DFF9B3631847DF793
Reporter abuse_ch
Tags:zip


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: maghazaei.dns.parsdev.net
Sending IP: 185.73.113.90
From: f.hojati@monibco.com
Reply-To: f.hojati@monibco.com
Subject: Re: Re Re: Re Re: Re Re: Re Re: Re Re: Re
Attachment: products order pdf.zip (contains "products order pdf.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
68
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Adware.Slugin-6803969-0
Create hunting rule

PUA.Win.Adware.Slugin-6840354-0
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/367a15201aa2f5e4e0ce8eeb2db718504b653ca2c2d2dab61098b0d97536ada2/
Threat name:
Win32.Trojan.Ymacco
Create hunting rule
Status:
Malicious
First seen:
2020-07-16 08:58:08 UTC
AV detection:
22 of 28 (78.57%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=gz5bkia2ul26jygor3vs3nyykbfwkpfcyljnvnqqtcyns5jwvwra._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

zip 367a15201aa2f5e4e0ce8eeb2db718504b653ca2c2d2dab61098b0d97536ada2

(this sample)

Executable exe ab4583eefcd41b355fe38fcabdfe18450722b162f7b9e8e9ba346040355f4126

  
Dropping
MD5 4ff5fb572d684243772cf24b3035ba11
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 ab4583eefcd41b355fe38fcabdfe18450722b162f7b9e8e9ba346040355f4126

Comments