MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 68f2127ca5e808474139b66d145a3cc539c81b98d199e66e40e2d8ebc539fb6f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 68f2127ca5e808474139b66d145a3cc539c81b98d199e66e40e2d8ebc539fb6f
SHA3-384 hash: 6e5143ef648f326aa47b84e94605b6627b1d3cef36de816c591d0186b2fff178927f1ee9c3305c6b529fcbbea3fb4905
SHA1 hash: 63d3ce3fe2e5a54a37bbb5059ec9884212ca6240
MD5 hash: cbf4a64e3ac80ffc592c0a5a109d6cb2
humanhash: winner-berlin-potato-wolfram
File name:简历.chm
Download: download sample
File size:11'938 bytes
First seen:2023-07-10 09:46:09 UTC
Last seen:Never
File type:
MIME type:application/octet-stream
ssdeep 96:Mg14WHmLKd7Kw7GK6Q46bvuY3VKdmq83hWw3IOqdEy:MgPGLSKc6lsxVKdp83hWw3c
TLSH T19F326C74E3046730F10BC7B8AFDAD0893B3A7882AAB459A7215D931E4F52C093BB55B5
Reporter obfusor
Tags:chm

Intelligence

File Origin
# of uploads :
1
# of downloads :
98
Origin country :
HK HK
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.HTML.Exploit-3.UNOFFICIAL
Create hunting rule

Gathering data
Verdict:
Malicious
Labled as:
Trojan.Script
Link:
https://www.hybrid-analysis.com/sample/68f2127ca5e808474139b66d145a3cc539c81b98d199e66e40e2d8ebc539fb6f
Result
Verdict:
MALICIOUS
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/68f2127ca5e808474139b66d145a3cc539c81b98d199e66e40e2d8ebc539fb6f/
Threat name:
Document-HTML.Trojan.Heuristic
Create hunting rule
Status:
Malicious
First seen:
2023-07-09 10:18:55 UTC
File Type:
Binary (Archive)
Extracted files:
11
AV detection:
8 of 38 (21.05%)
Threat level:
  2/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=ndzbe7ff5aeeoqjzwzwriwr4yu44qg4y2gm6m3sa4lmoxrjz7nxq._file
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Link:
https://tria.ge/reports/230710-ppgegaac25/
Malware family:
xRAT
Create hunting rule
Verdict:
Malicious
Link:
https://www.vmray.com/analyses/_mb/68f2127ca5e8/report/overview.html
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments