MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 83d171ffcf9f88d4e1408e34ef2829c849b90748e1b7b2da0679d6ee39cd958f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments

SHA256 hash: 83d171ffcf9f88d4e1408e34ef2829c849b90748e1b7b2da0679d6ee39cd958f
SHA3-384 hash: 9ab0ffbd370d9176200d1855411139fee4288860fc66db6675582910e54833645714dd3825660a6616a78c97eac355cf
SHA1 hash: 53ef35185fa07082cb278e7ef52645a21fbbe058
MD5 hash: 0e65c589e0c6edffb3b305e7595a271b
humanhash: spaghetti-eleven-maine-oven
File name:ddd.xlsb
Download: download sample
File size:13'247 bytes
First seen:2023-05-29 07:20:14 UTC
Last seen:Never
File type:Excel file xlsx
MIME type:application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
ssdeep 192:0TUa42Szpq9H5FEBPJ2Z3KmFOt+FnzKqiWlw0QSFMaxon0YSntQ:ZaHiBPJ2cEnz3lwduMaxon0i
TLSH T1EE527D8DD36870A4C1BF6C3DC21B0CF1DA49705A9D85F70E24967A0D2ABE19327CE29D
TrID 77.7% (.ZIP) Open Packaging Conventions container (17500/1/4)
17.7% (.ZIP) ZIP compressed archive (4000/1)
4.4% (.PG/BIN) PrintFox/Pagefox bitmap (640x800) (1000/1)
Reporter JAMESWT_WT
Tags:xlsx

Intelligence


File Origin
# of uploads :
1
# of downloads :
277
Origin country :
IT IT
Vendor Threat Intelligence
Malware family:
n/a
ID:
1
File name:
ddd.xlsb
Verdict:
No threats detected
Analysis date:
2023-05-29 07:22:34 UTC
Tags:
n/a

Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Result
Verdict:
Clean
Maliciousness:

Behaviour
Searching for the window
Creating a window
Label:
Malicious
Suspicious Score:
6.2/10
Score Malicious:
63%
Score Benign:
37%
Result
Threat name:
n/a
Detection:
unknown
Classification:
n/a
Score:
0 / 100
Behaviour
Behavior Graph:
Threat name:
Document.Trojan.Heuristic
Status:
Malicious
First seen:
2023-05-28 11:27:03 UTC
File Type:
Document
Extracted files:
19
AV detection:
4 of 24 (16.67%)
Threat level:
  2/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Behaviour
Checks processor information in registry
Enumerates system info in registry
Modifies Internet Explorer settings
Modifies registry class
Suspicious behavior: AddClipboardFormatListener
Suspicious use of SetWindowsHookEx
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Excel file xlsx 83d171ffcf9f88d4e1408e34ef2829c849b90748e1b7b2da0679d6ee39cd958f

(this sample)

  
Delivery method
Distributed via web download

Comments