MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 42fb8a2fa1add857371877831770e274aeca1dbf78267507ff5f3aa24202b81b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	42fb8a2fa1add857371877831770e274aeca1dbf78267507ff5f3aa24202b81b
SHA3-384 hash:	61a6621cd5701314da6f2a6b7ef0acdf4cd4a5bcf075064adf9cd6837e0bfdc2bb3afbf6e0c9bc5d223d12d5c9a11258
SHA1 hash:	0c3509e3e65221827fb04811db4a610e28c701f4
MD5 hash:	e306491f387d2c07faae5518196171f8
humanhash:	november-colorado-vegan-tennessee
File name:	DJXZ3689_2832026.zip
Download:	download sample
Signature	IcedID Alert Create hunting rule
File size:	366'185 bytes
First seen:	2023-10-11 23:29:46 UTC
Last seen:	Never
File type:	zip
MIME type:	application/zip
Note:	This file is a password protected archive. The password is: W1289
ssdeep	6144:zJNw0a+t8TzZzaa7pMw5QyWAR7b3br8aplWQtkFH0nfLSNvP+/tZOxKyE:I07mTKpyWApL38olWQtkQjCuGq
TLSH	T189742361E60A03F6ED42553E8A902F4237A8F5BC4C86EF4481BAF55377E4199E1F3944
TrID	80.0% (.ZIP) ZIP compressed archive (4000/1) 20.0% (.PG/BIN) PrintFox/Pagefox bitmap (640x800) (1000/1)
Reporter	JAMESWT_WT
Tags:	gestionhqse-com IcedID p-W1289 pw-W1289 zip

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

180

Origin country :

IT

File Archive Information

This file is a password protected archive. The password is: W1289

This file archive contains 2 file(s), sorted by their relevance:

Relevant files 2

File name:	Faq[2023.10.11_08-07].txt
File size:	177 bytes
SHA256 hash:	d805759ae88a8dbe2cf1a32f4c33f56024742af5bebf708ffd7f72e7a07df4f1
MD5 hash:	7cca33c338116b95f6ed41346d5f5e71
MIME type:	text/plain
Signature	IcedID

File name:	Offer[2023.10.11_08-07].vbs
File size:	1'037'304 bytes
SHA256 hash:	b5bc094bbd3cc9ed9642938c98a480fa36e45d7d6e13adb8fe73f4315831291f
MD5 hash:	b4b825dad434b62c41475ba1f199cb26
MIME type:	text/plain
Signature	IcedID

Vendor Threat Intelligence

FileScan.io

Gathering data

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/42fb8a2fa1add857371877831770e274aeca1dbf78267507ff5f3aa24202b81b

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/42fb8a2fa1add857371877831770e274aeca1dbf78267507ff5f3aa24202b81b/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=il5yul5bvxmfonyyo6bro4hcosxmuhn7pathkb77l45keqqcxanq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.