MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8b2df4c5ebfb5d1d9d823dfac97f157e655a0f922978f3afa1a0acc154ea238f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8b2df4c5ebfb5d1d9d823dfac97f157e655a0f922978f3afa1a0acc154ea238f
SHA3-384 hash: 8f9db3a8c3dd699de57583eb30e0ee4b764cd3c002e060eb0e9bbc24793eb4c467b825cd4d094efb4dea93c78e60b3b3
SHA1 hash: 54f7e8acae2c81fea75d7e7d51e610ff8b592d6e
MD5 hash: 1d66b919853e28e79e7b677a396726ce
humanhash: sink-angel-pip-low
File name:8b2df4c5ebfb5d1d9d823dfac97f157e655a0f922978f3afa1a0acc154ea238f
Download: download sample
File size:14'788 bytes
First seen:2020-03-23 16:57:41 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 384:co18gRhLlbleV7PtvQ1C5TWektfgeQzwMhOBAgIrQdoDqQK2jv4xT:DVhZbMU6Sek5gRNsBTIcoD62jv4R
TLSH 9762C01C380222BF199B52B4250EB461565E9F8BC63224C77A2B52DEBAB437894D8235
Reporter Marco_Ramilli
Tags:Emotet zip

Intelligence

File Origin
# of uploads :
1
# of downloads :
71
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.JS.Obfus-1069.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.JS.Obfus-1914.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.26228.JsHeur.UNOFFICIAL
Create hunting rule

Txt.Downloader.Nemucod-6776394-0
Create hunting rule

Txt.Downloader.Sload-6953589-0
Create hunting rule

Js.Downloader.Emotet-6954534-0
Create hunting rule

PUA.SecuriteInfo.com.JS.Malware-1.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Script-JS.Trojan.Sload
Create hunting rule
Status:
Malicious
First seen:
2019-04-24 22:02:39 UTC
AV detection:
17 of 29 (58.62%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

zip 8b2df4c5ebfb5d1d9d823dfac97f157e655a0f922978f3afa1a0acc154ea238f

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/182294/
  
Delivery method
Distributed via web download

Comments