MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 77c37435a60605c9937f1d4cb1d63c5f2be447cc06d4ebad6cdc55cd574c5d41. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	77c37435a60605c9937f1d4cb1d63c5f2be447cc06d4ebad6cdc55cd574c5d41
SHA3-384 hash:	a6430214361f7589ae29278f289d9f15e17d2bd3d024a890aae37bb05f1e1dc76620621a627a403f66d3dee987f2cd05
SHA1 hash:	9fbb7ed8eb780431b6bb3c70de4d2e1fe617e11d
MD5 hash:	79dfc319a71d3f3fe14476bb9d0235c1
humanhash:	network-river-spaghetti-dakota
File name:	NATUSyy.pdf
Download:	download sample
Signature	Pikabot Alert Create hunting rule
File size:	283'314 bytes
First seen:	2023-12-07 20:16:55 UTC
Last seen:	Never
File type:	pdf
MIME type:	application/pdf
ssdeep	6144:5/1h2Kvdq629Z0ABpQKNGjgYYJqOJmpJRJp67P2fLv1CCx7fLg/u:DFq62P09jg5JfeJ6eTVYu
TLSH	T1BE541391728D4DD8119EC6AF8330EDCBD8C65A9D6C18C57B5EB4B032E5B91B38BF5280
Reporter	proxylife
Tags:	pdf Pikabot SOFT BLANKET LTD

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

527

Origin country :

GE

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.PDF.DropperX-gen.30866.30638.UNOFFICIAL

Alert

Create hunting rule

DocGuard Clean

Result

Verdict:

Clean

File Type:

PDF File

Link:

https://app.docguard.net/77c37435a60605c9937f1d4cb1d63c5f2be447cc06d4ebad6cdc55cd574c5d41/results/dashboard

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

phishing

Link:

https://www.filescan.io/uploads/65722843855eb2633d62d700/reports/d05bf263-9052-4e75-9628-2070b5f041cd/overview

Hybrid Analysis Pdf/malicious_confidence_60%

Verdict:

Malicious

Labled as:

Pdf/malicious_confidence_60%

Link:

https://www.hybrid-analysis.com/sample/77c37435a60605c9937f1d4cb1d63c5f2be447cc06d4ebad6cdc55cd574c5d41

inlyse Malware.AI Benign

Label:

Benign

Suspicious Score:

2.9/10

Score Malicious:

29%

Score Benign:

71%

Link:

https://www.malware.ai/gui/files/?id=fc3dce53-a090-4526-87a0-076ed4b30325

Joe Sandbox clean

Result

Threat name:

n/a

Detection:

clean

Classification:

n/a

Score:

2 / 100

Link:

https://www.joesandbox.com/analysis/1355777

Behaviour

Behavior Graph:

n/a

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/77c37435a60605c9937f1d4cb1d63c5f2be447cc06d4ebad6cdc55cd574c5d41/

ReversingLabs TitaniumCloud Document-PDF.Dropper.Heuristic

Threat name:

Document-PDF.Dropper.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2023-12-07 20:17:11 UTC

File Type:

Document

Extracted files:

1

AV detection:

3 of 37 (8.11%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=o7bxinngayc4te37dvgldvr4l4v6ir6ma3koxllm3rk42v2mlvaq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Pikabot

Threat name:

Pikabot

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/77c37435a60605c9937f1d4cb1d63c5f2be447cc06d4ebad6cdc55cd574c5d41