MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 429037c8b2170b4da498bebcd0ecb17a87308971fa2d85bf5ac2d03633227093. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	429037c8b2170b4da498bebcd0ecb17a87308971fa2d85bf5ac2d03633227093
SHA3-384 hash:	4d8e2e6483c9c11ff42a4548c6994b57119a4f3f77910ee910a8df855fb02b57ff619891e0ce29e831af563d87a31186
SHA1 hash:	086c0193fb59047799ddffb9a40c09a7fb446ca0
MD5 hash:	f6038a7c9c9ab3508bb76f887649cb02
humanhash:	solar-sixteen-ohio-mirror
File name:	current_yet.zip
Download:	download sample
Signature	IcedID Alert Create hunting rule
File size:	459'457 bytes
First seen:	2022-12-05 20:52:31 UTC
Last seen:	Never
File type:	zip
MIME type:	application/zip
Note:	This file is a password protected archive. The password is: 0sgxZ5
ssdeep	12288:I1XS2tSdchJc/jUQzZTcM1eEkSYMmc+xiOjOP2m:uidc8UQVTh1eEkXMuNm
TLSH	T1FEA42353784A002F59F05A2C5DF849BBBA2F368ADD9190135F91DDBECF16029FBC91A0
TrID	80.0% (.ZIP) ZIP compressed archive (4000/1) 20.0% (.PG/BIN) PrintFox/Pagefox bitmap (640x800) (1000/1)
Reporter	proxylife
Tags:	787509923 IcedID pw-0sgxZ5 zip

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

194

Origin country :

RU

File Archive Information

This file is a password protected archive. The password is: 0sgxZ5

This file archive contains 1 file(s), sorted by their relevance:

Relevant files 1

File name:	current_yet.msi
File size:	737'280 bytes
SHA256 hash:	f677d2fffd8bce6f18a28b156c937e1e28a83bb2a29e2470e76d9314c2168678
MD5 hash:	123e08900a96c6f2f8edf6f7c8658436
MIME type:	application/x-msi
Signature	IcedID

Vendor Threat Intelligence

FileScan.io

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/429037c8b2170b4da498bebcd0ecb17a87308971fa2d85bf5ac2d03633227093/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ikidpsfsc4fu3jeyx26nb3frpkdtbclr7iwylp22ylidmmzcocjq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.