MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 74c69940f96ccad21c7bfa75d6ee8dec4a78b16e0a32abe104d24c2076a574d5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	74c69940f96ccad21c7bfa75d6ee8dec4a78b16e0a32abe104d24c2076a574d5
SHA3-384 hash:	be2a2f67ed3a0770d0302ee879d3ea09efec4de531f69d4847244670801d574dafc5d290957e07da0d5b528dd2544e82
SHA1 hash:	4d74de5d8a269eb22bdc2ab3563d7fd4f819d1a9
MD5 hash:	3a0baa797d0f1c7fb1d4eb267debe554
humanhash:	undress-pluto-november-six
File name:	case_-2023_4824647818.pdf
Download:	download sample
Signature	DarkGate Alert Create hunting rule
File size:	76'223 bytes
First seen:	2024-02-12 17:11:02 UTC
Last seen:	Never
File type:	pdf
MIME type:	application/pdf
ssdeep	1536:v2nPukT9krbpxMOTFyVA1fsYvJSA3H+podVVV7:vUPukBSkOTFy3YvvB7
TLSH	T1D673E11676AC6854D4178AAADC19372944ACB23E55C470CF707B07C72AA3C10BB6DFAF
Reporter	k3dg3___
Tags:	admin888 DarkGate pdf TA571

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

583

Origin country :

US

Vendor Threat Intelligence

DocGuard Clean

Result

Verdict:

Clean

File Type:

PDF File

Link:

https://app.docguard.net/74c69940f96ccad21c7bfa75d6ee8dec4a78b16e0a32abe104d24c2076a574d5/results/dashboard

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

phishing

Link:

https://www.filescan.io/uploads/65ca5128179f724a955023d2/reports/bb3a28e1-a29a-46bc-994c-5945365e8bac/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/74c69940f96ccad21c7bfa75d6ee8dec4a78b16e0a32abe104d24c2076a574d5

inlyse Malware.AI Benign

Label:

Benign

Suspicious Score:

4.5/10

Score Malicious:

46%

Score Benign:

54%

Link:

https://www.malware.ai/gui/files/?id=d44f5ac3-4608-48e1-923b-ec3c8e1bd53e

InQuest MALICIOUS

Result

Verdict:

MALICIOUS

Details

Document With Few Pages

Document contains between one and three pages of content. Most malicious documents are sparse in page count.

Document With Minimal Content

Document contains less than 1 kilobyte of semantic information.

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

52 / 100

Link:

https://www.joesandbox.com/analysis/1390982

Signature

Downloads suspicious files via Chrome

Malicious sample detected (through community Yara rule)

Behaviour

Behavior Graph:

Download SVG

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/74c69940f96ccad21c7bfa75d6ee8dec4a78b16e0a32abe104d24c2076a574d5/

ReversingLabs TitaniumCloud Document-PDF.Trojan.Darkgate

Threat name:

Document-PDF.Trojan.Darkgate

Alert

Create hunting rule

Status:

Suspicious

First seen:

2024-02-12 17:12:04 UTC

File Type:

Document

Extracted files:

13

AV detection:

9 of 23 (39.13%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=otdjsqhzntfnehd37j25n3un5rfhrmlobizkxyie2jgca5vfotkq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI DarkGate

Threat name:

DarkGate

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/74c69940f96ccad21c7bfa75d6ee8dec4a78b16e0a32abe104d24c2076a574d5