MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 65c93026453a6cfd5f647115cbb2086542034435a8dc2559e3ee3daa9e024661. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 65c93026453a6cfd5f647115cbb2086542034435a8dc2559e3ee3daa9e024661
SHA3-384 hash: d2b194f2f633c54cc73f3000535208c55e524b3049b13527331ceede6e0d66700dc3e777e779ef6d3ddc921fc970bef1
SHA1 hash: bae643524d84d5c5a5a206ed3b94f80cb0e86768
MD5 hash: 0e99a61bb6a6a99e3a6146b3afa82753
humanhash: glucose-football-east-carolina
File name:Binance Mega Treasure Hunt 12 Word Phrase.img
Download: download sample
File size:1'245'184 bytes
First seen:2020-12-20 07:57:12 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 3072:tIKesH5cjqbN/l71vJpVZ0y13knCgmgZZo/dr2/eP:ttv5cjwxvHVZ0y1UCgVZ+dr2/e
TLSH 88455A6731D61DCCDCDE8AFE5E196CF25767FDAEC32260953A09A02A06C3141B62E71C
Reporter abuse_ch
Tags:img


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: mailer.binance.com
Sending IP: 185.244.38.210
From: Binance<do_not_reply@mailer.binance.com>
Subject: 12 Days of Christmas Treasure Hunt! N100,000 Worth of Prizes to be won!
Attachment: Binance Mega Treasure Hunt 12 Word Phrase.img (contains "Binance Mega Treasure Hunt.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
127
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.Inject4.6317.29443.21170.UNOFFICIAL
Create hunting rule

Result
Gathering data
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/65c93026453a6cfd5f647115cbb2086542034435a8dc2559e3ee3daa9e024661/
Threat name:
Win32.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2020-12-19 03:43:18 UTC
AV detection:
15 of 29 (51.72%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=mxetajsfhjwp2x3eoek4xmqimvbagrbvvdockwpd5y62vhqcizqq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Trojan
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/65c93026453a6cfd5f647115cbb2086542034435a8dc2559e3ee3daa9e024661

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

img 65c93026453a6cfd5f647115cbb2086542034435a8dc2559e3ee3daa9e024661

(this sample)

Executable exe f512e47ce691f996f43e74cb07be9443f5aa34e1ebcdf3c52c9601da073ea779

  
Dropping
MD5 e0195c4ca8f838672836ac80b4195517
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 f512e47ce691f996f43e74cb07be9443f5aa34e1ebcdf3c52c9601da073ea779

Comments