MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3f7a5830f2edc0a5d6943b6a5eabe28f8e26a5ecd7a729495efc4f09f1500fc2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	3f7a5830f2edc0a5d6943b6a5eabe28f8e26a5ecd7a729495efc4f09f1500fc2
SHA3-384 hash:	fbabfcce6f488b9218182edf9996ecea73e6b8c9d7bb529fb647c70e85f06b5f0501f5dc1739baf895d1a3be974a52a6
SHA1 hash:	bc5740382c1ff9d78b80b7bee74e0c597b7ca967
MD5 hash:	909185e4a3ce3ec008da45b5ea0d0b25
humanhash:	grey-minnesota-washington-mexico
File name:	report_209.pdf
Download:	download sample
Signature	BazaLoader Alert Create hunting rule
File size:	350'397 bytes
First seen:	2024-09-27 19:45:11 UTC
Last seen:	Never
File type:	pdf
MIME type:	application/pdf
ssdeep	6144:IOEk6BtSLuEf/QiEJw1TZG/8eB7GnK4OdDH+K3E:JAC6a/9X1TZaB7Gw1eK3E
TLSH	T1A474936B9AF3F0EB615D49701B01B17DF6E12D9B53F29C9C2DA5AD40348BDC026362E8
Magika	pdf
Reporter	k3dg3___
Tags:	BazaLoader Brute Ratel BruteRatel Latrodectus pdf

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

826

Origin country :

US

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Other.Malware-gen.31385.19202.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

90.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=66f70b7b4b14762f62125db7

Tags:

Execution Generic Infostealer Network Stealth Phishing Exploit Tori Sage

DocGuard Clean

Result

Verdict:

Clean

File Type:

PDF File

Link:

https://app.docguard.net/3f7a5830f2edc0a5d6943b6a5eabe28f8e26a5ecd7a729495efc4f09f1500fc2/results/dashboard

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

action macros phishing

Link:

https://www.filescan.io/uploads/66f70b7cb0f518b6a9fc9feb/reports/d437c8c8-c2c9-4928-9f9a-a4733f37c3cd/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/3f7a5830f2edc0a5d6943b6a5eabe28f8e26a5ecd7a729495efc4f09f1500fc2

inlyse Malware.AI

Gathering data

InQuest SUSPICIOUS

Result

Verdict:

SUSPICIOUS

Details

Document With Few Pages

Document contains between one and three pages of content. Most malicious documents are sparse in page count.

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

52 / 100

Link:

https://www.joesandbox.com/analysis/1520770

Signature

AI detected landing page (webpage, office document or email)

Suricata IDS alerts for network traffic

Behaviour

Behavior Graph:

Download SVG

Nucleon Malprob Malware

Score:

99%

Verdict:

Malware

File Type:

PDF

Link:

https://malprob.io/report/3f7a5830f2edc0a5d6943b6a5eabe28f8e26a5ecd7a729495efc4f09f1500fc2

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/3f7a5830f2edc0a5d6943b6a5eabe28f8e26a5ecd7a729495efc4f09f1500fc2/

ReversingLabs TitaniumCloud Document-PDF.Trojan.Heuristic

Threat name:

Document-PDF.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2024-09-27 19:46:04 UTC

File Type:

Document

Extracted files:

1

AV detection:

7 of 38 (18.42%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=h55fqmhs5xaklvuuhnvf5k7cr6hcnjpm26tsssk67rhqt4kqb7ba._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/3f7a5830f2edc0a5d6943b6a5eabe28f8e26a5ecd7a729495efc4f09f1500fc2