MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8cccfb25adbe29e3c074f067b55522d4c2fde672b4bce124b48495d21787d8d3. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


HawkEye


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8cccfb25adbe29e3c074f067b55522d4c2fde672b4bce124b48495d21787d8d3
SHA3-384 hash: 113c07bc575de179e37c38977ad55dbefbed1b186e6b9d8628a281bc0f82ac52bc2870ccd468495126021e69bf27a04f
SHA1 hash: dcba76e086aa5e5c0bec657012a6eecf13013bc5
MD5 hash: 287e2bdd1f178d6632a8c1f55d071ca2
humanhash: five-double-iowa-vermont
File name:Invoice and quotation.img
Download: download sample
Signature HawkEye
Create hunting rule
File size:1'245'184 bytes
First seen:2020-06-17 10:34:44 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 6144:25v3dM4VEKcJo+VbuKS4VB0mpBymVPLpNmJALWJDarn1dw4jZQZXgYEaP:jsEPo+Vbuh4VbBymVPDlKar1CX9
TLSH C8458EA0F248ACA8DD0B52725C3AFA21151BBE9A85F4C51D365FB61A1BF33432467D0F
Reporter cocaman
Tags:HawkEye img


Avatar
cocaman
Malicious email
From: "Giorgia Bigliardi" <commerciale@forbikes.it>
Received: from forbikes.it (unknown [193.142.59.75])
Date: 17 Jun 2020 10:10:54 -0700
Subject: FOB prices for our market
Attachment: Invoice and quotation.img

Intelligence

File Origin
# of uploads :
1
# of downloads :
72
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Zmutzy
Create hunting rule
Status:
Malicious
First seen:
2020-06-17 10:37:14 UTC
File Type:
Binary (Archive)
Extracted files:
15
AV detection:
14 of 29 (48.28%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=rtgpwjnnxyu6hqdu6bt3kvjc2tbp3ztsws6ocjfuqsk5ef4h3djq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

HawkEye

img 8cccfb25adbe29e3c074f067b55522d4c2fde672b4bce124b48495d21787d8d3

(this sample)

HawkEye

Executable exe f86be0fe01d3a3fae24c8bf92bb289ec52dd7f6a9461b9ce95f062d162f124c0

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 f86be0fe01d3a3fae24c8bf92bb289ec52dd7f6a9461b9ce95f062d162f124c0

Comments