MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 69cd8411acceb5ef435edb6b549a624e52adb018bbc76404043e1aaf83acb805. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 69cd8411acceb5ef435edb6b549a624e52adb018bbc76404043e1aaf83acb805
SHA3-384 hash: 8a46db3b9c6d2db47797c75b576f5a51dc6e9ea782ca15832a939ca973436ccad527d307f959d7a455e2f58669e2376e
SHA1 hash: dc06ad8b5d432980f102d3f678e611ccbef70f63
MD5 hash: 2b6fad56d2cca91b4ebd5dc6f639c39c
humanhash: arkansas-freddie-football-butter
File name:Prueba de pago2.zip
Download: download sample
File size:699'315 bytes
First seen:2020-11-05 09:18:22 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:5uLuq07TcUorgVg+U+gFMS6XvBvYr78b4VKPGGC6Qe2PTUDLQESbSSBOfmUEe4ty:oLuqycUDDcGXpvlb4IBC1TUnQ9dBOfmG
TLSH B8E433C48B599C7F9A8804839F94746EB11EB3F983F848BB8ACD410E257F61FDB14949
Reporter abuse_ch
Tags:ESP geo zip


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: imscp.swebians.com
Sending IP: 144.76.175.181
From: Carles Llorens <support@rieth-kg.de>
Reply-To: dh_derhawk@126.com
Subject: justificación de transferencia
Attachment: Prueba de pago2.zip (contains "Prueba de pago2.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
67
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Variant.Strictor.251080.14026.14761.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/69cd8411acceb5ef435edb6b549a624e52adb018bbc76404043e1aaf83acb805/
Threat name:
Win32.Infostealer.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-11-05 00:18:41 UTC
AV detection:
11 of 45 (24.44%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=nhgyienmz2266q263nvvjgtcjzjk3mayxpdwibaehynk7a5mxacq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

zip 69cd8411acceb5ef435edb6b549a624e52adb018bbc76404043e1aaf83acb805

(this sample)

Executable exe 586a5c6bcf95f6049dc38661cff95eb5000a05ddad7ed07236bfdabee7ffd30f

  
Dropping
MD5 cd9db6a7a7edbbdd2e2ace29bcd9efa9
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 586a5c6bcf95f6049dc38661cff95eb5000a05ddad7ed07236bfdabee7ffd30f

Comments