MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8ea34fe052f0bec25ced84dddb76b5da6178ec77ca78a975e472550a67e3d55e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	8ea34fe052f0bec25ced84dddb76b5da6178ec77ca78a975e472550a67e3d55e
SHA3-384 hash:	ab82b816226c7ed432c5080df46743a719481f9a1097a26e6dae550fbdcc8e118fba4255c1ca06db55b0de65dbffc7ab
SHA1 hash:	78531effe64906cc08d9a154a2bdcab07a405d9a
MD5 hash:	a4b461808e67ac5359976299d99165a0
humanhash:	helium-colorado-vermont-single
File name:	BCNO2478_6257299.zip
Download:	download sample
Signature	IcedID Alert Create hunting rule
File size:	365'647 bytes
First seen:	2023-10-11 23:29:32 UTC
Last seen:	Never
File type:	zip
MIME type:	application/zip
Note:	This file is a password protected archive. The password is: W1289
ssdeep	6144:jWIv3MgqIFdUDW7qrento2t7LJ6WAthXPO3USTpFsg4OibdoXXj2dlshxBwfdC+K:bPModU6qrQi2t7F9EhXPyFVJ3kd6K/+b
TLSH	T1B0742315C390D925893B215A7AD00AC9C7D7A7A93B11A3563E1503C3A0DFE71BEA2F1F
TrID	80.0% (.ZIP) ZIP compressed archive (4000/1) 20.0% (.PG/BIN) PrintFox/Pagefox bitmap (640x800) (1000/1)
Reporter	JAMESWT_WT
Tags:	gestionhqse-com IcedID p-W1289 pw-W1289 zip

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

177

Origin country :

IT

File Archive Information

This file is a password protected archive. The password is: W1289

This file archive contains 2 file(s), sorted by their relevance:

Relevant files 2

File name:	FAQ[2023.10.11_08-07].txt
File size:	173 bytes
SHA256 hash:	4bc712f01c84730816b8d88ed29bf2f5e3e1b725ca550910df2b86bfc01cf7ee
MD5 hash:	09075ce34e4c197d192bbde948264fb9
MIME type:	text/plain
Signature	IcedID

File name:	NEW_OFFER[2023.10.11_08-07].vbs
File size:	1'036'932 bytes
SHA256 hash:	aceb5742ec615a86a038e90b61c518e2a239b94dd9f34dfe1e035225f6aadac7
MD5 hash:	8499ced1659790a9c571bb6e95af2b13
MIME type:	text/plain
Signature	IcedID

Vendor Threat Intelligence

FileScan.io

Gathering data

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/8ea34fe052f0bec25ced84dddb76b5da6178ec77ca78a975e472550a67e3d55e

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/8ea34fe052f0bec25ced84dddb76b5da6178ec77ca78a975e472550a67e3d55e/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=r2ru7ycs6c7mexhnqto5w5vv3jqxr3dxzj4ks5peojkquz7d2vpa._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.