MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 44737c01c93b96afcbb96c0b38993594d29a0a07d625999ef503c8424da90b0e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 8


Intelligence 8 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 44737c01c93b96afcbb96c0b38993594d29a0a07d625999ef503c8424da90b0e
SHA3-384 hash: 9f77de5dfde81ec4f5f9996f3936864668d998bceb8908ceb28559cb174ac38d2caa3f0b0edb5a4a8fa8bbcd03d2d2c1
SHA1 hash: 76500b0f17fab41cf5339c6034d3d95312f1f232
MD5 hash: d975b425bf0bf640e5825b5b92654fac
humanhash: maine-beryllium-pluto-nitrogen
File name:May10-2023-Invoice-DocuSign.js
Download: download sample
File size:51'448 bytes
First seen:2023-05-27 02:09:06 UTC
Last seen:Never
File type:Java Script (JS) js
MIME type:text/plain
ssdeep 768:DdUqDi+qUjqt35yYKEPPsLYqarEPqjZ/baviPxJvrDpPl2EHw9bzD2JVNsm:eqDoQTEXs+rkM/HJv5Pl2EHwleVWm
TLSH T121331EDF25E100599DFA293C93EF1BC46B90909BE798FD930C95F1B43CA498879A4CC9
Reporter malware_traffic
Tags:159-65-42-223 js

Intelligence

File Origin
# of uploads :
1
# of downloads :
269
Origin country :
US US
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.Generic.33696382.9061.9548.UNOFFICIAL
Create hunting rule

Verdict:
Malicious
Threat level:
  10/10
Confidence:
100%
Tags:
nemucod obfuscated sload
Link:
https://www.filescan.io/uploads/6471667badebac48a7f88382/reports/dbf47612-34c8-4b53-8844-df82b5b4eacc/overview
Verdict:
Malicious
Labled as:
Trojan.Generic
Link:
https://www.hybrid-analysis.com/sample/44737c01c93b96afcbb96c0b38993594d29a0a07d625999ef503c8424da90b0e
Result
Verdict:
MALICIOUS
Result
Threat name:
n/a
Detection:
malicious
Classification:
evad
Score:
52 / 100
Link:
https://www.joesandbox.com/analysis/1243647
Signature
JScript performs obfuscated calls to suspicious functions
Sample has a suspicious name (potential lure to open the executable)
Behaviour
Behavior Graph:
Download SVG
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/44737c01c93b96afcbb96c0b38993594d29a0a07d625999ef503c8424da90b0e/
Threat name:
Win32.Trojan.Seheq
Create hunting rule
Status:
Malicious
First seen:
2023-05-10 19:50:14 UTC
AV detection:
3 of 36 (8.33%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=irzxyaojholk7s5znqftrgjvstjjucqh2yszthxvapeeetnjbmha._file
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Link:
https://tria.ge/reports/230527-clpkfsae3z/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.60
Link:
https://yomi.yoroi.company/submissions/44737c01c93b96afcbb96c0b38993594d29a0a07d625999ef503c8424da90b0e

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments