MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 622b2f883a0bb94c4946f0a431e6568d6c8cb5dc54e214197fe002b6c850ff4e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	622b2f883a0bb94c4946f0a431e6568d6c8cb5dc54e214197fe002b6c850ff4e
SHA3-384 hash:	9d0dfd1eb90f695e46b38f2b27b00aebbe9671c333fdaa91e4ec3dc4a58ac2989624e2fe8b78ff3350f8da891df533cc
SHA1 hash:	e384bd6438fc5e16c3dd472aee121b44c9060bd2
MD5 hash:	925d7dd7651c06ee06c8abdb4ded6e25
humanhash:	colorado-grey-delta-alanine
File name:	IPSY0138_4221801.zip
Download:	download sample
Signature	IcedID Alert Create hunting rule
File size:	365'953 bytes
First seen:	2023-10-11 23:27:05 UTC
Last seen:	Never
File type:	zip
MIME type:	application/zip
Note:	This file is a password protected archive. The password is: W1289
ssdeep	6144:AUhfNQDsPhUoIGbjHccRl6trl3pL9ymmMik5j8Cx26Rddtwe84Q99gFkwraS9:Dh0sPhUfoTccmtrR1rmMiQltRdy96kwr
TLSH	T1D2742333E803A94788092999E3252DED39F819FEDD1E07704982FC978D732EE5452A77
TrID	80.0% (.ZIP) ZIP compressed archive (4000/1) 20.0% (.PG/BIN) PrintFox/Pagefox bitmap (640x800) (1000/1)
Reporter	JAMESWT_WT
Tags:	IcedID pw-W1289 zip

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

154

Origin country :

IT

File Archive Information

This file is a password protected archive. The password is: W1289

This file archive contains 2 file(s), sorted by their relevance:

Relevant files 2

File name:	FAQ[2023.10.11_08-07].txt
File size:	142 bytes
SHA256 hash:	2facd5ab497275334a3397e6467a6c64c03adcd02d8184139267fd1d985d3540
MD5 hash:	1ccd6fde7de3c8184610ef40bdb1d4cb
MIME type:	text/plain
Signature	IcedID

File name:	document[2023.10.11_08-07].vbs
File size:	1'036'550 bytes
SHA256 hash:	3a487d3f3cea6d0b055a46c6a2371de2631089400459617c554cbe263e045296
MD5 hash:	730202d675eaf81bc96b9c9b1d6168d9
MIME type:	text/plain
Signature	IcedID

Vendor Threat Intelligence

FileScan.io

Gathering data

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/622b2f883a0bb94c4946f0a431e6568d6c8cb5dc54e214197fe002b6c850ff4e

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/622b2f883a0bb94c4946f0a431e6568d6c8cb5dc54e214197fe002b6c850ff4e/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=mivs7cb2bo4uyskg6csddzswrvwizno4ktrbigl74ablnscq75ha._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.