MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6ad2faa5670910ae421f0ee00665a3bfa590f4a223c82ba08c362a11afab80d3. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 6ad2faa5670910ae421f0ee00665a3bfa590f4a223c82ba08c362a11afab80d3
SHA3-384 hash: ee86c758737c2d9b2f20bde85f53ab85cfd8e164e9a483328a00911d89ba7ce1e1011faeb724e0452503b3947b4ab59d
SHA1 hash: aea708c67d028820ebcf321b63a8e14f41604d27
MD5 hash: 5293e2825421433c7e1d93d33ab0f769
humanhash: earth-social-alaska-summer
File name:SKM_C3350191107102300.zip
Download: download sample
File size:86'596 bytes
First seen:2020-10-20 11:47:38 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 1536:OUl6bzY8cN61GyN+Wk7xNKqYIoeHJ14n7LX3cOMLVcqVen0FIJaIZNHUcx/j:Ohb8jgIyNClBoeHJQ7LXsO+sUIHZ5h
TLSH D58312670D0C9B074ED9BAB986815F09B6C3DDB00D3E9CDB479028DAE4CE474DA82F81
Reporter abuse_ch
Tags:zip


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: blancmariclo.com
Sending IP: 103.99.1.143
From: Catherine Minio <mini@blancmariclo.com>
Subject: AW: Quotation for new order
Attachment: SKM_C3350191107102300.zip (contains "SKM_C3350191107102300.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
71
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Heur.16399.7751.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/6ad2faa5670910ae421f0ee00665a3bfa590f4a223c82ba08c362a11afab80d3/
Threat name:
ByteCode-MSIL.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2020-10-20 11:13:39 UTC
AV detection:
9 of 48 (18.75%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=nljpvjlhbeik4qq7b3qamzndx6szb5fcepecxiemgyvbdl5lqdjq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.55
Link:
https://yomi.yoroi.company/submissions/6ad2faa5670910ae421f0ee00665a3bfa590f4a223c82ba08c362a11afab80d3

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

zip 6ad2faa5670910ae421f0ee00665a3bfa590f4a223c82ba08c362a11afab80d3

(this sample)

Executable exe 433e74586489fb0367428e0847579bb4aee3981c06076a0782a437b77db5c8e7

  
Dropping
MD5 c817a493c842b7aa65b5843303fa4aa8
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 433e74586489fb0367428e0847579bb4aee3981c06076a0782a437b77db5c8e7

Comments