MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7dd62898d277998f952cd4d97408dd547fd4034c4bc5fe45d47db0f4b3c151b0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Renamer


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 7dd62898d277998f952cd4d97408dd547fd4034c4bc5fe45d47db0f4b3c151b0
SHA3-384 hash: 581b5577121ea09a3b579a9943ea2d976bb6bbf77bf6b925895593f1e8e8df3c398aaba2803373e61f3f095d8d636d70
SHA1 hash: cbac30d312c74c2cf36d736dbac84a31b165ca3a
MD5 hash: 4e6c868b95728b7ae58d9d279d453529
humanhash: oscar-failed-speaker-low
File name:DHL PARCEL AWB 1377649875.rar
Download: download sample
Signature Renamer
Create hunting rule
File size:874'964 bytes
First seen:2020-10-26 14:10:56 UTC
Last seen:2020-10-26 14:11:13 UTC
File type: rar
MIME type:application/x-rar
ssdeep 24576:frOChA3hF3a4GULq3PHJtL8TQO3ejFRtGZ8krx:/A3h1a4GUG3P+XujFRtxkt
TLSH E41533E3F932C9B479DB0B369E500E8A3454A1ED13238D86FE6670395E95C27D17E223
Reporter abuse_ch
Tags:DHL rar Renamer


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: alhattabholding.com
Sending IP: 162.241.156.197
From: DHL DELIVERY REPORT/ AWB <angelaroslan@yahoo.com>
Reply-To: angelaroslan@yahoo.com
Subject: DHL PENDING PARCEL /DHL ARRIVAL NOTIFICATION !
Attachment: DHL PARCEL AWB 1377649875.rar (contains "DHL PARCEL AWB 1377649875.exe")

Intelligence

File Origin
# of uploads :
2
# of downloads :
85
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/7dd62898d277998f952cd4d97408dd547fd4034c4bc5fe45d47db0f4b3c151b0/
Threat name:
Win32.Trojan.DistTrack
Create hunting rule
Status:
Malicious
First seen:
2020-10-26 03:02:51 UTC
AV detection:
17 of 29 (58.62%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=pxlcrggso6my7fjm2tmxicg5kr75ia2mjpc74roupwypjm6bkgya._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Renamer

rar 7dd62898d277998f952cd4d97408dd547fd4034c4bc5fe45d47db0f4b3c151b0

(this sample)

Renamer

Executable exe b6177b19a010725f003f7828862f9217af33f3b38a517a40c94c7e8174a91c95

  
Dropping
MD5 61e2a89e1c0a05bcb513a0b7cbcc571d
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 b6177b19a010725f003f7828862f9217af33f3b38a517a40c94c7e8174a91c95

Comments