MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 779753f63676ae3c31b1abeb0ccab3579e26efc5bc5b45cd07c7db5af7dc3b6e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 779753f63676ae3c31b1abeb0ccab3579e26efc5bc5b45cd07c7db5af7dc3b6e
SHA3-384 hash: 9d49f0137d10d598abff79bbd9a78a36cf9ffa2a575f51e1ba0e2b90ff0e1569d1fcc666b603a5effd55e782ae97d5c2
SHA1 hash: b31935d45daa428466e05c4a61567b5fca5fc4ab
MD5 hash: 24495904316fe4b444b46e17f43b4228
humanhash: nebraska-twelve-yellow-enemy
File name:scan_065.rar
Download: download sample
File size:580'457 bytes
First seen:2020-12-13 17:11:11 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:UlxijFhRxfRY9bu5CalWMJNKRYjcrFj9OqkeQMoF/CY4wCSO:Mixhvpp5CalWkwrFxFaFX5O
TLSH E8C4237414D76FCABDE98801BFADED58981039A086CDD4AF42B7D55B1CA4BEF800E4B0
Reporter abuse_ch
Tags:rar


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: vortexfield.eu
Sending IP: 37.120.206.112
From: Jessica <jessica@vortexfield.eu>
Reply-To: jessica@unisa-europea.com
Subject: Payment Sent T/T Receipt Attached.
Attachment: scan_065.rar (contains "C8RJm0Libd5MxJE.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
163
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/779753f63676ae3c31b1abeb0ccab3579e26efc5bc5b45cd07c7db5af7dc3b6e/
Threat name:
ByteCode-MSIL.Trojan.Strictor
Create hunting rule
Status:
Malicious
First seen:
2020-12-13 17:12:06 UTC
AV detection:
6 of 48 (12.50%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=o6lvh5rwo2xdymnrvpvqzsvtk6pcn36fxrnultihy7nvv564hnxa._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/779753f63676ae3c31b1abeb0ccab3579e26efc5bc5b45cd07c7db5af7dc3b6e

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

rar 779753f63676ae3c31b1abeb0ccab3579e26efc5bc5b45cd07c7db5af7dc3b6e

(this sample)

Executable exe db37093d59e7660f7e6f742ba2f521fa0bd874223759768ed0f234fc18553bb8

  
Dropping
MD5 34f6a90b1df6c840a21c0f37bc904322
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 db37093d59e7660f7e6f742ba2f521fa0bd874223759768ed0f234fc18553bb8

Comments