MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 38335cb1d4ad5c72e7ce64150124f0b60ae1da38d862ed40b6a5a2b92b7ed0b0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	38335cb1d4ad5c72e7ce64150124f0b60ae1da38d862ed40b6a5a2b92b7ed0b0
SHA3-384 hash:	4dbfdc87a4e32d1bcccfa73370b33dd9c48fe99d14e887fa97a4f4ff056ceef0ff7c2ea977bd9389cfdc8d94a51761f9
SHA1 hash:	80b2630f4fcfa6bcf30e924aaa9c9865ba53d021
MD5 hash:	7a834d4052bb802d1f8ce3c3b31b815b
humanhash:	pluto-eight-california-eleven
File name:	AHNV3568_5761796.zip
Download:	download sample
Signature	IcedID Alert Create hunting rule
File size:	366'076 bytes
First seen:	2023-10-11 23:26:24 UTC
Last seen:	Never
File type:	zip
MIME type:	application/zip
Note:	This file is a password protected archive. The password is: W1289
ssdeep	6144:en2lm2O1P/XSet58WG3lWpYzn9RFgSrE8H5B75EUjaaTgzhLynmmOHsndG:6gm2OJ/SesMGY8H5B75EFPWrOMndG
TLSH	T1ED7423F3996F98CAC34910F5EC8979047FF5BB1A539F3B496B42985E0E701E400B1EA6
TrID	80.0% (.ZIP) ZIP compressed archive (4000/1) 20.0% (.PG/BIN) PrintFox/Pagefox bitmap (640x800) (1000/1)
Reporter	JAMESWT_WT
Tags:	gestionhqse-com IcedID p-W1289 pw-W1289 zip

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

151

Origin country :

IT

File Archive Information

This file is a password protected archive. The password is: W1289

This file archive contains 2 file(s), sorted by their relevance:

Relevant files 2

File name:	ReadMe[2023.10.11_08-07].txt
File size:	177 bytes
SHA256 hash:	51bc88558bb5980b84deb932449419178871ce74e6c29ea3bd31ed33f78cbac6
MD5 hash:	92685b16b706151897794d7d6dcea42d
MIME type:	text/plain
Signature	IcedID

File name:	NEW_WORKING_CONDITIONS[2023.10.11_08-07].vbs
File size:	1'036'663 bytes
SHA256 hash:	bf51efbef9813712f82853e75ceeb111310155505c00e8ba03eb5250e1ef2e73
MD5 hash:	ad5758d7325bf0a3f10b7124904569d0
MIME type:	text/plain
Signature	IcedID

Vendor Threat Intelligence

FileScan.io

Gathering data

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/38335cb1d4ad5c72e7ce64150124f0b60ae1da38d862ed40b6a5a2b92b7ed0b0

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/38335cb1d4ad5c72e7ce64150124f0b60ae1da38d862ed40b6a5a2b92b7ed0b0/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=hazvzmouvvohfz6omqkqcjhqwyfodwry3bro2qfwuwrlsk362cya._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.