MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 486f346471c445aab050b2f6d8770fd7eb335cc4078459a94ed358249386bb4e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	486f346471c445aab050b2f6d8770fd7eb335cc4078459a94ed358249386bb4e
SHA3-384 hash:	50fce2a955b217aeea2c3c28bd347c4edbfcaddba3c81aa43cc9261172cfd61fd5fc88ec11474c5606c290b4230e457d
SHA1 hash:	a4f122f71a069b144b3bfb62994a0eae73458f5d
MD5 hash:	983a0bf99b9f078bcab5c0cedbbe1135
humanhash:	crazy-stairway-diet-alabama
File name:	RIMESSA_CASSEGNI21032023-8608.pdf
Download:	download sample
Signature	Gozi Alert Create hunting rule
File size:	150'652 bytes
First seen:	2023-03-21 13:32:42 UTC
Last seen:	2023-03-21 13:35:04 UTC
File type:	pdf
MIME type:	application/pdf
ssdeep	3072:mXZn4WiOLVM25WPqPyk4fCWvmKNzr7D8hzkvm666NwJdw57ftCYw5w1:gZJid25WPqPx4vdxr7DJm6666JdkTT
TLSH	T1DEE31250519FE84DDC0892A2E52E76BEBB9F77A270C420D5EC5F956ED0C0E01E80BED5
Reporter	JAMESWT_WT
Tags:	GLS Gozi ITA megabiger-com pdf Ursnif

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

412

Origin country :

IT

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

Sanesecurity.Malware.29060.PdfHeur.BadDom.UNOFFICIAL

Alert

Create hunting rule

DocGuard Suspicious

Result

Verdict:

Suspicious

File Type:

PDF File

Link:

https://app.docguard.net/486f346471c445aab050b2f6d8770fd7eb335cc4078459a94ed358249386bb4e/results/dashboard

FileScan.IO No Threat

Verdict:

No Threat

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6419b20fc60b3295f52c5952/reports/4fa549cb-ec43-4188-b8ed-5a701d578211/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/486f346471c445aab050b2f6d8770fd7eb335cc4078459a94ed358249386bb4e

inlyse Malware.AI Benign

Label:

Benign

Suspicious Score:

10/10

Score Malicious:

11%

Score Benign:

89%

Link:

https://www.malware.ai/gui/files/?id=22c61af6-ce9b-4c6d-b867-b2e5e19e12b4

Joe Sandbox clean

Result

Threat name:

Unknown

Detection:

clean

Classification:

n/a

Score:

0 / 100

Link:

https://www.joesandbox.com/analysis/1198620

Behaviour

Behavior Graph:

n/a

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/486f346471c445aab050b2f6d8770fd7eb335cc4078459a94ed358249386bb4e/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=jbxtizdryrc2vmcqwl3nq5yp27vtgxgea6cftkko2nmcje4gxnha._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI ursnif3

Threat name:

ursnif3

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/486f346471c445aab050b2f6d8770fd7eb335cc4078459a94ed358249386bb4e