MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 69cd8e3341f9e11332b019b086a3a0da120385e3afa894ae852308ec6007b446. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 69cd8e3341f9e11332b019b086a3a0da120385e3afa894ae852308ec6007b446
SHA3-384 hash: 92a03bca710c39cfc6ea25546e2ae69b726100276cd5915eb1391f88dd85e628dc075d0b55f9674b97ac7bd291639a96
SHA1 hash: d580a0fb2fb4a391e988c39d7c3d1505d86b83eb
MD5 hash: 23bcf66d49cb11c738e415b4f3dfe8a2
humanhash: georgia-lactose-florida-sweet
File name:company profile.rar
Download: download sample
File size:534'613 bytes
First seen:2020-10-14 16:23:38 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:WsWVBYRSXJjSZ8gPSHeZ5woOhlTr/iUaHPjrVEwZTEGUPvH:WzB3XxBoG1i5brVE+UPv
TLSH E6B4234F6F00603735A7432BA696F08AA777FA311E70ECA67A9A35089441D5AE037D8D
Reporter abuse_ch
Tags:rar


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: pacificstargroups.pw
Sending IP: 192.129.245.90
From: Imelda Barrows <lmelda.ba@balchem.com>
Reply-To: essen_salvan@yahoo.com
Subject: Balchem Product enquiry
Attachment: company profile.rar (contains "company profile.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
79
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/69cd8e3341f9e11332b019b086a3a0da120385e3afa894ae852308ec6007b446/
Threat name:
ByteCode-MSIL.Trojan.CryptInject
Create hunting rule
Status:
Malicious
First seen:
2020-10-14 08:43:01 UTC
AV detection:
6 of 48 (12.50%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=nhgy4m2b7hqrgmvqdgyini5a3ijahbpdv6ujjlufemeoyyahwrda._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/69cd8e3341f9e11332b019b086a3a0da120385e3afa894ae852308ec6007b446

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

rar 69cd8e3341f9e11332b019b086a3a0da120385e3afa894ae852308ec6007b446

(this sample)

Executable exe 056a851a602049d9cd9c08aae6989c89500b7e1a531fa85b3e3063117009b583

  
Dropping
MD5 c9526847e63d579afea7e09809597bbd
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 056a851a602049d9cd9c08aae6989c89500b7e1a531fa85b3e3063117009b583

Comments