MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8a7237e6e32add2e2477058bcfecac9c21502f6dd298ef1d05dd8075d327aed3. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	8a7237e6e32add2e2477058bcfecac9c21502f6dd298ef1d05dd8075d327aed3
SHA3-384 hash:	fb164e5ba3d73b60fa58be1dd917f4ac5e0ba8319abd35a49525a6a1560c98e8de3cd27bcf60f92a5f1ae4ef862d2feb
SHA1 hash:	c3f58f1c4012752afab906d0d80385475f58d1a6
MD5 hash:	61120ce69cb83e19bdb41f9eea585da8
humanhash:	beer-solar-minnesota-one
File name:	AUWX1459_6602647.zip
Download:	download sample
Signature	IcedID Alert Create hunting rule
File size:	365'928 bytes
First seen:	2023-10-11 23:14:17 UTC
Last seen:	2023-10-11 23:29:26 UTC
File type:	zip
MIME type:	application/zip
Note:	This file is a password protected archive. The password is: W1289
ssdeep	6144:lhDCVwXCdpK8ZZvVr+oHAe72bKNlysmbWzmehRfUhI6DfnoTE:3+V0SpK8ZtEoHAe7MKNlyspRReT
TLSH	T19A74236C6BD0B6D0EFE1823BE4A54BDD7037361D7A54265DAA1FFC3067061B88A38816
TrID	80.0% (.ZIP) ZIP compressed archive (4000/1) 20.0% (.PG/BIN) PrintFox/Pagefox bitmap (640x800) (1000/1)
Reporter	JAMESWT_WT
Tags:	gestionhqse-com IcedID p-W1289 pw-W1289 zip

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

154

Origin country :

IT

File Archive Information

This file is a password protected archive. The password is: W1289

This file archive contains 2 file(s), sorted by their relevance:

Relevant files 2

File name:	FAQ[2023.10.11_08-07].txt
File size:	155 bytes
SHA256 hash:	52d1d920141fde0a03a2f1030a1ff534824e6bea00c9d8bf15e4577affed748f
MD5 hash:	22e81d6d76e467979e3ef4b7352fd258
MIME type:	text/plain
Signature	IcedID

File name:	inquiry[2023.10.11_08-07].vbs
File size:	1'036'616 bytes
SHA256 hash:	51215d7d543fa28d5327e31002069f37a17cbed4b539bbf437d3a56cf906d3db
MD5 hash:	cf9c217dd4416c8454b923f0bb526748
MIME type:	text/plain
Signature	IcedID

Vendor Threat Intelligence

FileScan.io

Gathering data

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/8a7237e6e32add2e2477058bcfecac9c21502f6dd298ef1d05dd8075d327aed3

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/8a7237e6e32add2e2477058bcfecac9c21502f6dd298ef1d05dd8075d327aed3/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=rjzdpzxdflos4jdxawf473fmtqqval3n2kmo6hif3wahluzhv3jq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.