MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 55d76b580ae98c5589b1ff9a643cc8cedcaa3bb5405c2808caf4ba5506f53e23. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	55d76b580ae98c5589b1ff9a643cc8cedcaa3bb5405c2808caf4ba5506f53e23
SHA3-384 hash:	bacef4df78ed72fa4b2e381699b79934690dd4b66cc5a27c484caddf1cd6ac29a89ede1c7f14fd555bbc862cccdca9a2
SHA1 hash:	9e66b1153eca2a15b9697499ca1e7ca9f781cc03
MD5 hash:	5794e7d7f9ac624535b2f8dc2a5285e8
humanhash:	minnesota-alaska-shade-enemy
File name:	Docs_Unpaid_#367.zip
Download:	download sample
Signature	IcedID Alert Create hunting rule
File size:	341'155 bytes
First seen:	2023-03-24 18:41:45 UTC
Last seen:	Never
File type:	zip
MIME type:	application/zip
ssdeep	6144:tdzdYDDJO+ZHogEh/kpb1A+oj+bNMGKJgCmaIn8kvmrzxipf5:tdpkDJOKHoGpixexwHfIpR
TLSH	T1DB7423C07B48296BB431D392EB34997507210BF01B5FDD9095A26F5AC342BDE26F4EC9
TrID	80.0% (.ZIP) ZIP compressed archive (4000/1) 20.0% (.PG/BIN) PrintFox/Pagefox bitmap (640x800) (1000/1)
Reporter	proxylife
Tags:	1883783121 IcedID pw-749 zip

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

147

Origin country :

SG

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

Sanesecurity.Malware.24937.ZipHeur.UNOFFICIAL

Alert

Create hunting rule

FileScan.io

Gathering data

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/55d76b580ae98c5589b1ff9a643cc8cedcaa3bb5405c2808caf4ba5506f53e23

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/55d76b580ae98c5589b1ff9a643cc8cedcaa3bb5405c2808caf4ba5506f53e23/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=kxlwwwak5ggflcnr76ngipgiz3okuo5vibocqcgk6s5fkbxvhyrq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

n/a

Link:

https://tria.ge/reports/230324-xgb4saag7s/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.