MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4f802e2ae77ec84155954b73d61bde410b93c2a32a1db93c61692889570001f3. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments

SHA256 hash: 4f802e2ae77ec84155954b73d61bde410b93c2a32a1db93c61692889570001f3
SHA3-384 hash: 7105c4d6c863591d99da9e080c174f2f3a008172f4ae4c50746b89f2c3a4f7b35069b0a52b09ad4f7852ddb2b50158d7
SHA1 hash: 064799d1729a4980d44d8a6c5b527b28027e558a
MD5 hash: c351a6e4fcf4e222def71a4b1dda3773
humanhash: tennessee-oxygen-football-aspen
File name:PrintAndMailDHLCFinfo.iso
Download: download sample
File size:4'325'376 bytes
First seen:2020-03-31 13:59:48 UTC
Last seen:2020-04-02 10:04:34 UTC
File type: iso
MIME type:application/x-iso9660-image
ssdeep 49152:HRQKN4sLOIr0KLOGtCfepXj/489nrjUYv13ROMK9Fx:6KN4sLtr0K6J2V/r9nrjUnMK9X
TLSH 7D167B26F3429877C1531A30DE0782EE9A35BF106E3495877BB43E0CAF797927539292
Reporter cocaman
Tags:COVID-19 iso

Intelligence


File Origin
# of uploads :
2
# of downloads :
80
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Xaparo
Status:
Malicious
First seen:
2020-03-31 14:35:47 UTC
File Type:
Binary (Archive)
Extracted files:
173
AV detection:
11 of 47 (23.40%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

iso 4f802e2ae77ec84155954b73d61bde410b93c2a32a1db93c61692889570001f3

(this sample)

  
Delivery method
Distributed via e-mail link

Comments