MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7f3477b5b3b5a75ca5601ac7f6510ed4dbd1977a5b435cd3d03ef00d0f946b28. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	7f3477b5b3b5a75ca5601ac7f6510ed4dbd1977a5b435cd3d03ef00d0f946b28
SHA3-384 hash:	6b998f9acfd41ea4447bcbe245dae6e1ba260ab255b75b06d75e9da1f47d70401c6042f5ee833e2d216fa1773509e9aa
SHA1 hash:	b4e11cdc2f488af30d7029db4e5b78514cb2f58f
MD5 hash:	02ef1f6747682764dec39f0c72573d3f
humanhash:	lactose-ink-kentucky-snake
File name:	DIMX0589_1100329.zip
Download:	download sample
Signature	IcedID Alert Create hunting rule
File size:	366'181 bytes
First seen:	2023-10-11 23:25:52 UTC
Last seen:	Never
File type:	zip
MIME type:	application/zip
Note:	This file is a password protected archive. The password is: W1289
ssdeep	6144:/1diYAEF2zEsbAxldJFDQh6d2ulW4B+f9GsIJySAa8HUyvrBjIsX5fl1AOA8qZ:ddPYzEsbAxzEEhlj5R8HUyjpjXJlm84
TLSH	T1C8742379FCD085BD8B12543C636BCCDF58CC38E4ADC1A76B5429778DB62442E02366BA
TrID	80.0% (.ZIP) ZIP compressed archive (4000/1) 20.0% (.PG/BIN) PrintFox/Pagefox bitmap (640x800) (1000/1)
Reporter	JAMESWT_WT
Tags:	gestionhqse-com IcedID p-W1289 pw-W1289 zip

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

144

Origin country :

IT

File Archive Information

This file is a password protected archive. The password is: W1289

This file archive contains 2 file(s), sorted by their relevance:

Relevant files 2

File name:	Readme[2023.10.11_08-07].txt
File size:	156 bytes
SHA256 hash:	14110eb7eee33e85bc23e654558cb32b539a6e81568d8a8b087f6d63ecbb766f
MD5 hash:	8c4f8d9db380a63723752c4f745a62de
MIME type:	text/plain
Signature	IcedID

File name:	Statement[2023.10.11_08-07].vbs
File size:	1'036'943 bytes
SHA256 hash:	4393a4c372a925ad97a4804c6748da9809b8e8bacd89061c8c3c5300212413b1
MD5 hash:	1c95398fd994ea907ddecbfe33243000
MIME type:	text/plain
Signature	IcedID

Vendor Threat Intelligence

FileScan.io

Gathering data

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/7f3477b5b3b5a75ca5601ac7f6510ed4dbd1977a5b435cd3d03ef00d0f946b28

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/7f3477b5b3b5a75ca5601ac7f6510ed4dbd1977a5b435cd3d03ef00d0f946b28/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=p42hpnntwwtvzjladld7muio2tn5df32lnbvzu6qh3ya2d4unmua._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.