MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7c6d001886a2ce4f4293c92cece2c3e3fc175386a977df4e5c654fb077c9761a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 7c6d001886a2ce4f4293c92cece2c3e3fc175386a977df4e5c654fb077c9761a
SHA3-384 hash: e0be07906bddacffdd80ccf4d0960849f8ff0167d58a10cd17bdb1765d8866860d5e594ae8dcb22af56cb0978584629f
SHA1 hash: d41c4ce71ded169932f0b4b025a458d663468a3a
MD5 hash: f6159c18fe39261363780912429f7353
humanhash: paris-bravo-kilo-berlin
File name:Ficha OMS - Reserva Medicos.rar
Download: download sample
File size:230'879 bytes
First seen:2020-07-12 08:31:33 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 6144:oQXUUr5+ViGa69ui0qVLwiuBlq9gg1gGIdsexkVFsXucu9bld:RXUUr5oiGL9TtFuDqGgmTs7VFsFu9bld
TLSH B334229A1444819FF8B1ADA85BD386242610DCF33365866DF299428BC414FC9DFCF67E
Reporter abuse_ch
Tags:rar


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: smtp-r144129.pro-smtp.fr
Sending IP: 185.254.144.129
From: <bestco@reservasbestco.com.br>
Subject: Solicitação de Reserva
Attachment: Ficha OMS - Reserva Medicos.rar (contains "Ficha OMS - Reserva Medicos.exe")

Unknown payload URL:
http://reservasbestco.com.br/final.jpg

Intelligence

File Origin
# of uploads :
1
# of downloads :
79
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/7c6d001886a2ce4f4293c92cece2c3e3fc175386a977df4e5c654fb077c9761a/
Threat name:
Script-VBS.Trojan.Laburrak
Create hunting rule
Status:
Suspicious
First seen:
2020-07-12 08:33:04 UTC
AV detection:
9 of 48 (18.75%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=prwqagegulhe6qutzewozywd4p6bou4gvf356ts4mvh3a56joyna._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

rar 7c6d001886a2ce4f4293c92cece2c3e3fc175386a977df4e5c654fb077c9761a

(this sample)

Executable exe b5e39716f576e5ff21e945560a98ee7ca7309491b2b7f2643728cd341b9c19de

  
URLhaus
https://urlhaus.abuse.ch/url/411996/
  
Dropping
MD5 e6e25bc559a331c79f173920071e4f8e
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 b5e39716f576e5ff21e945560a98ee7ca7309491b2b7f2643728cd341b9c19de

Comments