MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 56dedac45f41f69dbe0412ccfc655dcd4bcae37c65ffef094c1eb515aa0d8e66. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	56dedac45f41f69dbe0412ccfc655dcd4bcae37c65ffef094c1eb515aa0d8e66
SHA3-384 hash:	58d6e4b889e339f5b81fb3ad6df3792a5153418588caa0991c4f8482cd9cf56518d7cde6043a0a11939574abb238e413
SHA1 hash:	f6cce59f5e4f15926a8db631241640a88c5dbdb7
MD5 hash:	cbee0ca40e066aba258c5f215955bb5b
humanhash:	twenty-july-illinois-rugby
File name:	CalculationOfcosts-1337.pdf
Download:	download sample
Signature	Quakbot Alert Create hunting rule
File size:	106'903 bytes
First seen:	2023-06-14 16:34:01 UTC
Last seen:	Never
File type:	pdf
MIME type:	application/pdf
ssdeep	1536:wcs2UwcsB+csvVcshBI2L3RLYm3RE3MSLVMXLHtSR1GWBZD7p8VbLi6ofW:jmBL+MeVoHtSXGml6ninfW
TLSH	T1F5A37D6DA84CC688C979EBF2F712F4C9A54D732B5ECA94B571AF0FE61243C25E943801
Reporter	proxylife
Tags:	obama268 pdf Qakbot Quakbot

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

574

Origin country :

AR

Vendor Threat Intelligence

DocGuard Clean

Result

Verdict:

Clean

File Type:

PDF File

Link:

https://app.docguard.net/56dedac45f41f69dbe0412ccfc655dcd4bcae37c65ffef094c1eb515aa0d8e66/results/dashboard

FileScan.IO No Threat

Verdict:

No Threat

Threat level:

  2/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6489ec000c60f558f39925c9/reports/6d47528f-f389-4a97-8267-046a901edb1b/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/56dedac45f41f69dbe0412ccfc655dcd4bcae37c65ffef094c1eb515aa0d8e66

inlyse Malware.AI Benign

Label:

Benign

Suspicious Score:

/10

Score Malicious:

1%

Score Benign:

99%

Link:

https://www.malware.ai/gui/files/?id=701fed1b-8f5f-4869-bc17-67c50d209632

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/56dedac45f41f69dbe0412ccfc655dcd4bcae37c65ffef094c1eb515aa0d8e66/

ReversingLabs TitaniumCloud Document-PDF.Trojan.Heuristic

Threat name:

Document-PDF.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2023-06-14 16:35:05 UTC

File Type:

Document

Extracted files:

24

AV detection:

4 of 24 (16.67%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=k3pnvrc7ih3j3pqeclgpyzk5zvf4vy34mx766ckmd22rlkqnrzta._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Qakbot

Threat name:

Qakbot

Score:

0.90

Link:

https://yomi.yoroi.company/submissions/56dedac45f41f69dbe0412ccfc655dcd4bcae37c65ffef094c1eb515aa0d8e66