MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6d07c2e05e76dd17f1871c206e92f08b69c5a7804d646e5f1e943a169a8c50ee. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	6d07c2e05e76dd17f1871c206e92f08b69c5a7804d646e5f1e943a169a8c50ee
SHA3-384 hash:	a8c3b03f0126df972e6625cc7cbb3eb8e15f49d9b23ac8f780146a39134b25d428004de6d5594071feb013e755405a53
SHA1 hash:	2ff55caed82c65d97afb98c0d20aae917443b671
MD5 hash:	476cc7265f8dfbbc920c260975188981
humanhash:	oxygen-sodium-moon-autumn
File name:	INV_Unpaid_683_April.pdf
Download:	download sample
Signature	IcedID Alert Create hunting rule
File size:	27'273 bytes
First seen:	2023-04-12 05:09:08 UTC
Last seen:	Never
File type:	pdf
MIME type:	application/pdf
ssdeep	768:CbalnTTPRJ9cwpMU1OGdR0wgwJ4tFRgC4+8A9:9TT5J9cBU7R0wFERrp9
TLSH	T195C2BE56AD138232F54EE8708B15354CA89E524B57DF27742E383BFFA33C5660D89863
Reporter	malware_traffic
Tags:	BokBot IcedID pdf

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

406

Origin country :

US

Vendor Threat Intelligence

DocGuard Suspicious

Result

Verdict:

Suspicious

File Type:

PDF File

Link:

https://app.docguard.net/6d07c2e05e76dd17f1871c206e92f08b69c5a7804d646e5f1e943a169a8c50ee/results/dashboard

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/64363d2bf40ab7ac37f95c26/reports/4bf90b32-fd6c-4705-9630-dddc69de74a6/overview

Hybrid Analysis Hoax.PDF.Phish

Verdict:

Suspicious

Labled as:

Hoax.PDF.Phish

Link:

https://www.hybrid-analysis.com/sample/6d07c2e05e76dd17f1871c206e92f08b69c5a7804d646e5f1e943a169a8c50ee

inlyse Malware.AI Benign

Label:

Benign

Suspicious Score:

10/10

Score Malicious:

1%

Score Benign:

99%

Link:

https://www.malware.ai/gui/files/?id=0279639c-eea8-4db9-a2fc-056d4f362c2e

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Details

Document With Few Pages

Document contains between one and three pages of content. Most malicious documents are sparse in page count.

IPv4 Dotted Quad URL

A URL was detected referencing a direct IP address, as opposed to a domain name.

Joe Sandbox clean

Result

Threat name:

Unknown

Detection:

clean

Classification:

n/a

Score:

0 / 100

Link:

https://www.joesandbox.com/analysis/1212246

Behaviour

Behavior Graph:

n/a

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/6d07c2e05e76dd17f1871c206e92f08b69c5a7804d646e5f1e943a169a8c50ee/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=nud4fyc6o3orp4mhdqqg5exqrnu4lj4ajvsg4xy6sq5bngumkdxa._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/6d07c2e05e76dd17f1871c206e92f08b69c5a7804d646e5f1e943a169a8c50ee