MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8d52d3e8e810ae5a4ece315807edd7ae3d442269377675482b7129639c42fab1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	8d52d3e8e810ae5a4ece315807edd7ae3d442269377675482b7129639c42fab1
SHA3-384 hash:	81b3061ae28b3cd95977efe1c739b1ebfa0f6bd84754fbab1b452ba7a2fb2e9c4c93660ee93cd4e7e6ab01a4f7687468
SHA1 hash:	86e3c3f3341f894ce1c33080e5528b71b919b072
MD5 hash:	48886cc11e59d2e9f18a2638de18b5f7
humanhash:	uranus-lion-foxtrot-maryland
File name:	GMNP1456_9976206.zip
Download:	download sample
Signature	IcedID Alert Create hunting rule
File size:	366'271 bytes
First seen:	2023-10-11 23:29:56 UTC
Last seen:	Never
File type:	zip
MIME type:	application/zip
Note:	This file is a password protected archive. The password is: W1289
ssdeep	6144:EClfuYQYM8yX64ChLCJIRojxmUbDGsACHyV5SNLxvf7STkVyN/EwjX:FGYMkhhsxnbDGs3Hy38LtfmTayH
TLSH	T16874239D57FA252BC33911AB783B491813CDCA44810B987A2ACF88E5DCFE5D39737A41
TrID	80.0% (.ZIP) ZIP compressed archive (4000/1) 20.0% (.PG/BIN) PrintFox/Pagefox bitmap (640x800) (1000/1)
Reporter	JAMESWT_WT
Tags:	gestionhqse-com IcedID p-W1289 pw-W1289 zip

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

178

Origin country :

IT

File Archive Information

This file is a password protected archive. The password is: W1289

This file archive contains 2 file(s), sorted by their relevance:

Relevant files 2

File name:	FAQ[2023.10.11_08-07].txt
File size:	169 bytes
SHA256 hash:	6b146e5b217bd980f9c2491655cfafa402bc97495b280c94bcdd334dc9231e81
MD5 hash:	9b479d8ae80ddfcd93909c68137a7435
MIME type:	text/plain
Signature	IcedID

File name:	Inquiry[2023.10.11_08-07].vbs
File size:	1'037'182 bytes
SHA256 hash:	0aac9c2f0650d572c11b03ac3ad1a3abc981fc9eef3682ebdc17d0a2bb9e2c7e
MD5 hash:	b067d01ed850c7ab59e9c5ff8d62f30e
MIME type:	text/plain
Signature	IcedID

Vendor Threat Intelligence

FileScan.io

Gathering data

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/8d52d3e8e810ae5a4ece315807edd7ae3d442269377675482b7129639c42fab1

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/8d52d3e8e810ae5a4ece315807edd7ae3d442269377675482b7129639c42fab1/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=rvjnh2hiccxfutwogfmap3oxvy6uiitjg53hksbloeuwhhcc7kyq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.