MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 413d0aacddad41105f9f04de12cae9420919083796ed856df47ee2c7b3767fda. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	413d0aacddad41105f9f04de12cae9420919083796ed856df47ee2c7b3767fda
SHA3-384 hash:	1349946bf5c7efd9d3b0cd0e6d18606c11ffea7af27dd6379b46873712dd4e2c1a912fd5308fc0a961fe683d67384c24
SHA1 hash:	dd9342faa65376801a26f0a58534c7e4cbffc614
MD5 hash:	0b4aab3d1e2946b15b70a63187c1f927
humanhash:	xray-jersey-romeo-south
File name:	Invitation To Attend Cryptocurrency Awareness Seminar.chm
Download:	download sample
Signature	Bitter Alert Create hunting rule
File size:	11'264 bytes
First seen:	2023-09-04 17:00:29 UTC
Last seen:	Never
File type:
MIME type:	application/octet-stream
ssdeep	48:BH/gB09I06QRlEFlErlEl6I5s+BIj9SElv2JlMLFCBkkqGdDHugTae8Bn7pWH8N:BHNIDagi2/oC0iHfae4VWHW
TLSH	T120323CB0E3818674D3008F36ABC29987B625BC82D528C96B115F771D18B2F0A77B90D7
TrID	81.0% (.CHI) Windows HELP Index (17144/6) 18.9% (.CHM) Windows HELP File (4000/1)
Reporter	smica83
Tags:	apt Bitter chm

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

132

Origin country :

HU

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Exploit.ActiveX.23.9567.5837.UNOFFICIAL

Alert

Create hunting rule

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/64f60d4f5c5d7698b7f6349e/reports/70de7e4a-2412-40fa-962b-5f99164a9a56/overview

Hybrid Analysis Downloader/HTML.Generic

Verdict:

Malicious

Labled as:

Downloader/HTML.Generic

Link:

https://www.hybrid-analysis.com/sample/413d0aacddad41105f9f04de12cae9420919083796ed856df47ee2c7b3767fda

InQuest MALICIOUS

Result

Verdict:

MALICIOUS

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/413d0aacddad41105f9f04de12cae9420919083796ed856df47ee2c7b3767fda/

ReversingLabs TitaniumCloud Document-HTML.Trojan.Heuristic

Threat name:

Document-HTML.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2023-09-04 07:09:29 UTC

File Type:

Binary (Archive)

Extracted files:

16

AV detection:

12 of 36 (33.33%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ie6qvlg5vvarax47atpbfsxjiierscbxs3wyk3pup3rmpm3wp7na._file

VMRay Malicious

Verdict:

Malicious

Link:

https://www.vmray.com/analyses/_mb/413d0aacddad/report/overview.html

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.25

Link:

https://yomi.yoroi.company/submissions/413d0aacddad41105f9f04de12cae9420919083796ed856df47ee2c7b3767fda