MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 672e093d20a03fa9a4a91d4689beb0a1b93ab17c6cda1c527a86e3db8bb09348. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Gozi


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 672e093d20a03fa9a4a91d4689beb0a1b93ab17c6cda1c527a86e3db8bb09348
SHA3-384 hash: 760da6d22ea620050ce8a6534999ea9415a803ae5cb36cd7d5c182a171dd247ea387a2e240b5c69e2bfb2ec285e384ad
SHA1 hash: d2b61129e3fcedcc7701569d2fa7aca084590826
MD5 hash: 83f0b5834b73cec7bce8d3f10b633caa
humanhash: johnny-kentucky-queen-ceiling
File name:Agenzia.zip
Download: download sample
Signature Gozi
Create hunting rule
File size:479 bytes
First seen:2023-03-20 14:18:01 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6:5jFj9cf0jLZNMNNpkaemkQR9PcURBuSQVAQ+SlZuSjxIjAtxjluDS3ujjLZNnnJB:5jFjdjLYa1mnRFXL8yUzjlOjLTJdP
TLSH T1B7F0A3010B0D1701C2179FF9FD8662E8F3454D8E91B77B7B3A6082008C16EC59B2B14C
TrID 80.0% (.ZIP) ZIP compressed archive (4000/1)
20.0% (.PG/BIN) PrintFox/Pagefox bitmap (640x800) (1000/1)
Reporter JAMESWT_WT
Tags:agenziaentrate Gozi isfb MEF mise pw-Agenzia2023 Ursnif zip

Intelligence

File Origin
# of uploads :
1
# of downloads :
119
Origin country :
IT IT
Vendor Threat Intelligence
Gathering data
Verdict:
Unknown
Link:
https://www.hybrid-analysis.com/sample/672e093d20a03fa9a4a91d4689beb0a1b93ab17c6cda1c527a86e3db8bb09348
Result
Verdict:
UNKNOWN
Link:
https://labs.inquest.net/dfi/sha256/672e093d20a03fa9a4a91d4689beb0a1b93ab17c6cda1c527a86e3db8bb09348
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/672e093d20a03fa9a4a91d4689beb0a1b93ab17c6cda1c527a86e3db8bb09348/
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=m4xaspjaua72tjfjdvditpvqug4tvml4ntnbyut2q3r5xc5qsnea._file
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Link:
https://tria.ge/reports/230320-st6rpseb55/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/672e093d20a03fa9a4a91d4689beb0a1b93ab17c6cda1c527a86e3db8bb09348

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments