MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4e341f6d2d72c0fbdd5b89eba59702ddc802c924611c6f26b0fec1625ce37900. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Emotet (aka Heodo)


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments

SHA256 hash: 4e341f6d2d72c0fbdd5b89eba59702ddc802c924611c6f26b0fec1625ce37900
SHA3-384 hash: d607a2bcbaeaa6092ab552616933123974bd3ab7fde01e8e21a5d764b429ead3e0b60bee3692fdd52fcee6b7ca80c84b
SHA1 hash: e73053cefa3425d8ac304c16663bdba0c6357c6f
MD5 hash: 91315d21552f8aa2f3359b3786a617bc
humanhash: juliet-arkansas-beer-comet
File name:lijst-26689788.zip
Download: download sample
Signature Heodo
File size:87'443 bytes
First seen:2021-01-21 11:00:54 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 1536:eTROsF7kcpaDcKnmQRAGn6LlzrwbVrVTu7+jdFo1KpCOmdqbzJeSHxUms:eTR37kgFims8LFkbfTpjCKpSdUJxxu
TLSH 398302B48D2A82B57DABFDC9CF841D1BB16493CEB6DCEB790BB1941A70B05E21544233
Reporter Anonymous
Tags:Emotet Heodo pw:026


Avatar
Anonymous
Malicious Emotet doc file distributed in a password protected zip having password 026

Intelligence


File Origin
# of uploads :
1
# of downloads :
426
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
UNKNOWN
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Heodo

zip 4e341f6d2d72c0fbdd5b89eba59702ddc802c924611c6f26b0fec1625ce37900

(this sample)

  
Dropping
Emotet
  
Delivery method
Distributed via e-mail attachment

Comments