MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7bc1bba1dc1e015147494bc36fc493e759b5813062435ab997245b0fb962fc6c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 7bc1bba1dc1e015147494bc36fc493e759b5813062435ab997245b0fb962fc6c
SHA3-384 hash: 005c782625f4154e45e004d983ccb9332d99138f126ac6f97d0674b11e0c14ef36927a49a3f42184a3039fc9b121f93e
SHA1 hash: 73090e646c58cb2579484720c8a0ec206f874851
MD5 hash: 3ab645ecdb1a9ec912cd0878551d9a40
humanhash: delta-happy-november-paris
File name:Receipt009094484.img
Download: download sample
File size:1'245'184 bytes
First seen:2020-10-09 09:07:41 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 3072:mVfy26QsU1PlYRQIcESdrXHgAhApAhAzFN/Lnkmt:mVfybLU16PmXyN/Ln
TLSH 48458294729CBE12E5B22EF17BF1C1855932BD316D12C60C70F8368CC6A52C69D93ADE
Reporter abuse_ch
Tags:img


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: slot0.invoicez.xyz
Sending IP: 104.168.165.165
From: Rose Jones <postmaster@invoicez.xyz>
Subject: Payment Receipt 02201R and shipping details
Attachment: Receipt009094484.img (contains "Receipt009094484.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
101
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/7bc1bba1dc1e015147494bc36fc493e759b5813062435ab997245b0fb962fc6c/
Threat name:
Win32.Trojan.GenMlwB
Create hunting rule
Status:
Malicious
First seen:
2020-10-09 08:27:32 UTC
AV detection:
13 of 29 (44.83%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=ppa3xio4dyavcr2jjpbw7ret45m3lajqmjbvvomxernq7olc7rwa._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/7bc1bba1dc1e015147494bc36fc493e759b5813062435ab997245b0fb962fc6c

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

img 7bc1bba1dc1e015147494bc36fc493e759b5813062435ab997245b0fb962fc6c

(this sample)

Executable exe e125da6182625e0356145c2089fed83432b575064214800b1d4cbc61916749eb

  
Dropping
MD5 43d9d5fdbde6c1aedc76863c3f9213d2
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 e125da6182625e0356145c2089fed83432b575064214800b1d4cbc61916749eb

Comments