MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 7ec471bff3b6d2a908d526be87f5b5c6889900d880b902ced36ba401c3b54f4f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 3
| SHA256 hash: | 7ec471bff3b6d2a908d526be87f5b5c6889900d880b902ced36ba401c3b54f4f |
|---|---|
| SHA3-384 hash: | 2e21db70b9009113ecd0e4397ebdfa96d0c873892426b6c6d4deb14527631ae9d91e58f0ecc5a7ef76be7af9ee97bce7 |
| SHA1 hash: | 3f9f7addc3147654eb7a7883107df10427b932d4 |
| MD5 hash: | 618bc21afef7328c3e74f53487719f63 |
| humanhash: | florida-fillet-eighteen-johnny |
| File name: | Documents.zip |
| Download: | download sample |
| File size: | 579'707 bytes |
| First seen: | 2020-07-13 11:55:01 UTC |
| Last seen: | Never |
| File type: | zip |
| MIME type: | application/zip |
| ssdeep | 12288:ppT19Bws9j6hvH/X460sZAHEe7vPSj90bcUDxkfAg0:ppT19BwsAhvHpgHBvPswhq0 |
| TLSH | ADC4338E4EAEF72F044372A4F23165DFF6622152968BE8DF24ED2BF90CA419C4175097 |
| Reporter |  abuse_ch |
| Tags: | zip |
abuse_ch
Malspam distributing unidentified malware:HELO: ir-w2k16mx02.ihglobaldns.com
Sending IP: 185.10.75.16
From: razak@razak_labs.com <sales2@tamtrading.ir>
Reply-To: sales2@tamtrading.ir
Subject: Re:Important Details
Attachment: Documents.zip (contains "Gkauepj.exe")
Intelligence
File Origin
# of uploads :
1
# of downloads :
70
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Threat name:
Win32.Trojan.Delf
Status:
Malicious
First seen:
2020-07-13 11:56:07 UTC
AV detection:
25 of 47 (53.19%)
Threat level:
5/5
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
zip 7ec471bff3b6d2a908d526be87f5b5c6889900d880b902ced36ba401c3b54f4f
(this sample)
exe Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.