MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5d39b75eae07ccfe77968f0056eeb6feec2b124cd5d52327f4b162827beba604. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	5d39b75eae07ccfe77968f0056eeb6feec2b124cd5d52327f4b162827beba604
SHA3-384 hash:	faa0994ad22fc4187596f0d0a99678588c010242be8b38020cab520e581be9962c713b28b273613dae4c57a9979f5f5e
SHA1 hash:	0e492ea670a1efa45d742c7b1459966b29e3b6e8
MD5 hash:	52d108c6b8943f2dc03b5c34bc7cd204
humanhash:	black-north-nitrogen-nebraska
File name:	Setup_Win_16-12-2022_16-47-34.zip
Download:	download sample
Signature	IcedID Alert Create hunting rule
File size:	983'349 bytes
First seen:	2022-12-16 17:52:42 UTC
Last seen:	Never
File type:	zip
MIME type:	application/zip
ssdeep	24576:wrDBZuUzIwElVntXzUi1JN2ZS/fOnV5i5ln6mVPl07ntxnJJ8mrWKn:wHB/z/ElVnBzBJN2ZS/aBIMzP8mCG
TLSH	T1772533AC54312F753374A2D419D1A8796D1BA725E585371F3E07C8620A9BE8ED1303FB
TrID	80.0% (.ZIP) ZIP compressed archive (4000/1) 20.0% (.PG/BIN) PrintFox/Pagefox bitmap (640x800) (1000/1)
Reporter	proxylife
Tags:	1228806356 IcedID zip

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

153

Origin country :

DE

File Archive Information

This file archive contains 1 file(s), sorted by their relevance:

Relevant files 1

File name:	Setup_Win_16-12-2022_16-47-34.msi
File size:	1'712'128 bytes
SHA256 hash:	e8b323a81faf2904459bb4a35bc8e2519850afc9f960ffd06a22f3e197185a9a
MD5 hash:	392916da17e4ef4d8c88c778cf75db5a
MIME type:	application/x-msi
Signature	IcedID

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.Gen.Variant.MSILHeracles.55063.25628.2313.UNOFFICIAL

Alert

Create hunting rule

FileScan.io

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/5d39b75eae07ccfe77968f0056eeb6feec2b124cd5d52327f4b162827beba604/

ReversingLabs TitaniumCloud ByteCode-MSIL.Malware.Heracles

Threat name:

ByteCode-MSIL.Malware.Heracles

Alert

Create hunting rule

Status:

Malicious

First seen:

2022-12-16 17:53:09 UTC

File Type:

Binary (Archive)

Extracted files:

33

AV detection:

3 of 39 (7.69%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=lu43oxvoa7gp454wr4afn3vw73wcwesm2xksgj7uwfrie67luyca._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI IcedID

Threat name:

IcedID

Score:

0.90

Link:

https://yomi.yoroi.company/submissions/5d39b75eae07ccfe77968f0056eeb6feec2b124cd5d52327f4b162827beba604