MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 62f4326ef0aaa04bb7121ed3081d674cbc2b6b69fc726c1460cbc5af8f3a582e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 62f4326ef0aaa04bb7121ed3081d674cbc2b6b69fc726c1460cbc5af8f3a582e
SHA3-384 hash: d9d2faa89b4a54329bcb963e85f2d8073f427706617599a58ce2e1c16cebf85461caf33e9ee011f56813a4d28e9861c0
SHA1 hash: 7d955730920c3ff7a147307bc66379ff2ebdca35
MD5 hash: b0834d07facf31be640a5cb1552c7f0d
humanhash: lithium-green-india-alanine
File name:MANDUME - CTM REQUEST.pdf.zip
Download: download sample
File size:1'205'254 bytes
First seen:2020-05-18 10:34:06 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 24576:FWrfhOA0eBeoaRGGBwuaKdJmzjjLFLEaRJj/Ty1SlkWoKhFgxshZ:cZOADebRGsazHLqaHb+/WobxG
TLSH B345332115F471ABF8ADB79199C183A5AFB1832361CC138D25A5D34C6F2232D2E6EC76
Reporter jarumlus

Intelligence

File Origin
# of uploads :
1
# of downloads :
84
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.27686.AidExe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Trojan.PWS.Stealer.19347.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.25815.ZipHeur.BadExt.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Injector
Create hunting rule
Status:
Malicious
First seen:
2020-05-18 10:35:31 UTC
File Type:
Binary (Archive)
Extracted files:
27
AV detection:
21 of 48 (43.75%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=ml2de3xqvkqexnysd3jqqhlhjs6cw23j7rzgyfdazpc27dz2laxa._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

zip 62f4326ef0aaa04bb7121ed3081d674cbc2b6b69fc726c1460cbc5af8f3a582e

(this sample)

Executable exe ef65a30135b6992aaeacde426734212d73f563d0e6cffc59785aae1c495f8491

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 ef65a30135b6992aaeacde426734212d73f563d0e6cffc59785aae1c495f8491
  
Dropping
MD5 41d6ffe41958a127f0d7a0bc93c76095

Comments