MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 59c04c68eb110f4a505cd4333738a5b8807f68e3fd5c8458ddbade780a4c1ad0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	59c04c68eb110f4a505cd4333738a5b8807f68e3fd5c8458ddbade780a4c1ad0
SHA3-384 hash:	f92981f68783d0687ee409b35875660022f3eb482cbfe325141f30745572f02d821938a6c5ee161fb6f8ed1b6d9242ee
SHA1 hash:	00e953ec4f74444bda21a57a1ef1351af8047a8c
MD5 hash:	7f8d6422bfd12f85707a5c24b746daee
humanhash:	alanine-wolfram-arkansas-fourteen
File name:	AHPZ1578_5850747.zip
Download:	download sample
Signature	IcedID Alert Create hunting rule
File size:	366'235 bytes
First seen:	2023-10-11 23:29:03 UTC
Last seen:	Never
File type:	zip
MIME type:	application/zip
Note:	This file is a password protected archive. The password is: W1289
ssdeep	6144:LPpNSl8c8gAbErLxusvjATZ2oNBVB5+sOnS0vhReL7QIQHUrIrWHwEvB2mjG:9c0QQSjiZ2SB5sHvfg7ITqzBHa
TLSH	T1E37423A7233898E2923DC8F4D4F164964040EE9237F4D6AF68696C2153FE58A0F5F27D
TrID	80.0% (.ZIP) ZIP compressed archive (4000/1) 20.0% (.PG/BIN) PrintFox/Pagefox bitmap (640x800) (1000/1)
Reporter	JAMESWT_WT
Tags:	gestionhqse-com IcedID p-W1289 pw-W1289 zip

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

184

Origin country :

IT

File Archive Information

This file is a password protected archive. The password is: W1289

This file archive contains 2 file(s), sorted by their relevance:

Relevant files 2

File name:	ReadMe[2023.10.11_08-07].txt
File size:	149 bytes
SHA256 hash:	960dd4299695d307b802b024d7937d5a1c42bf1d46a926ab22426fdf77b8ee9a
MD5 hash:	ca7e624f465ed2315c59fac296890e4b
MIME type:	text/plain
Signature	IcedID

File name:	Offer[2023.10.11_08-07].vbs
File size:	1'037'088 bytes
SHA256 hash:	a9060e9aef4561a0f7e04e867c884a43fa13d59f15a6d673945f8c97806381f8
MD5 hash:	7fa3ce941b93faf5118a375b3dba6567
MIME type:	text/plain
Signature	IcedID

Vendor Threat Intelligence

FileScan.io

Gathering data

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/59c04c68eb110f4a505cd4333738a5b8807f68e3fd5c8458ddbade780a4c1ad0

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/59c04c68eb110f4a505cd4333738a5b8807f68e3fd5c8458ddbade780a4c1ad0/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=lhaey2hlcehuuuc42qztooffxcah62hd7voiiwg5xlphqcsmdlia._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.