MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5bc0e27e86d9a4d5e7005669c12b97b56a42ac17fb5cc93de24f38527b5e97e1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


IcedID


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 5bc0e27e86d9a4d5e7005669c12b97b56a42ac17fb5cc93de24f38527b5e97e1
SHA3-384 hash: c7032a65f754ca329b1e9ca9de46998e5cbdde28f1ea747c0cf39ac21f014538a5dcbbd18a9925aa8d3b8b815e302422
SHA1 hash: 39f4ac8a7383803dff84f0665abc5ad37135a68e
MD5 hash: 86f631aac07dd10b979cb68f2d9383b9
humanhash: cold-bacon-saturn-mountain
File name:~406015.exe
Download: download sample
Signature IcedID
Create hunting rule
File size:2'408'448 bytes
First seen:2020-06-10 10:57:35 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash c98c102a969a869775e75a3f478c16d3 (2 x IcedID)
ssdeep 49152:w3+67gUbJWkxh+VsE/8Rmz2x+zlKlwhK5+f73g:SZ7gUtxh+J8Rmz2xyKlwUE7
Threatray 886 similar samples on MalwareBazaar
TLSH 77B58D227CA08577C17303355D4EF27837BEAE684B24864B26D03F1CBE7526316696AF
Reporter JAMESWT_WT
Tags:IcedID

Intelligence

File Origin
# of uploads :
1
# of downloads :
116
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Variant.Razy.681475.31731.18680.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Worm.Cridex
Create hunting rule
Status:
Malicious
First seen:
2020-06-09 08:04:41 UTC
File Type:
PE (Exe)
Extracted files:
18
AV detection:
22 of 31 (70.97%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=lpaoe7ug3gsnlzyakzu4ck4xwvveflax7nomsppcj44fe626s7qq._file
Verdict:
malicious
Label(s):
gozi
Create hunting rule
icedid
Create hunting rule
Similar samples:
341621050c83b242a1779e5a88f4c6389b7efc1406d5e5ba8e7828a0d74fbb86
IcedID
4438467f45eedf09a6ddf01129a914bd3846bc7771bc15bfb512b85337b5d108
IcedID
485ce80c6972762a04ff59597bdd71381688c73750e1dddae91ad33e8e6f01b8
IcedID
648fa862ce3d2230c2754a31f45d20b74f70d8648a9ad5897ba0d6a35627b592
IcedID
75195784a153205aad34eea77c000358081fd1e1c8abab6e532b2ae8e983c44b
IcedID
8ce3415cbd2d4a9345a47b937a7af1eec4388d0e673ce7c701df043105b5134f
IcedID
9ad02a119c0df3fb652557b2b5c3136a3fb7f80e78774f1bffd5237eb2d9a514
IcedID
d748a00416baf3e4e5bf0a4e8312cd9c88872a6ab594628d7ff6d206e6705322
IcedID
f9e63320c3a3c14847155de9abdbbf38e44866500402d8985312d92f149df23b
IcedID
fd9ed4c7107c4fb86d348d13f7e6c3b6c23e6c12084adc45ddfef4bc2ef2fbaf
IcedID
+ 876 additional samples on MalwareBazaar
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Link:
https://tria.ge/reports/201109-zg7s3vhvd6/
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments