MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 72f28e04a34f890a77566e51a306e65ee904db6ed7694d10860a6d803cb8d8d0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 3
| SHA256 hash: | 72f28e04a34f890a77566e51a306e65ee904db6ed7694d10860a6d803cb8d8d0 |
|---|---|
| SHA3-384 hash: | a4b4dec5170490721c0872dda89b5f659e0885c073fecf7280677c8abba1368ec8780574772f052b9dafbad9aa4560a0 |
| SHA1 hash: | dfbace4b4a8a2566f665068085aced597ba6e441 |
| MD5 hash: | d615d9145f38353c7bf2bc58b6660e40 |
| humanhash: | ink-alaska-robin-victor |
| File name: | 72f28e04a34f890a77566e51a306e65ee904db6ed7694d10860a6d803cb8d8d0 |
| Download: | download sample |
| File size: | 31'625 bytes |
| First seen: | 2026-11-01 20:55:11 UTC |
| Last seen: | Never |
| File type: | zip |
| MIME type: | application/zip |
| ssdeep | 384:/eIuGJu6u1o2MFHJ+2RbloCtQqVPcWR5tLOvq63WSnp+IyQQSUlA+ecEDUfEXfu5:WI7TFH45/TWRvSQSYEP1pqpNutok+ |
| TLSH | T166E2C8351A5A0D3ADB0B6039F718E02DE9D5C694D26DEA0BBB1183D4C89F05A2F31F67 |
| Magika | zip |
| Reporter |  Tatamis |
| Tags: | ContagiousInterview DPRK github zip |
Tatamis
Contagious Interview (publicly tracked fake job-interview campaign). Observed statically in operator-controlled GitHub repositories, October 2026; nothing executed, no attacker host contacted. archive from operator repository Vercel-ip22/project-zip (move.zip), git blob e9e9aef91b2c322f28adb35d472599447c05fa27Intelligence
File Origin
# of uploads :
1
# of downloads :
3
Origin country :
ROVendor Threat Intelligence
Verdict:
Clean
Score:
99.9%
Tags:
n/a
Score:
1%
Verdict:
Benign
File Type:
ARCHIVE
Verdict:
inconclusive
YARA:
2 match(es)
Tags:
Zip Archive
Gathering data
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
zip 72f28e04a34f890a77566e51a306e65ee904db6ed7694d10860a6d803cb8d8d0
(this sample)
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.