MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 9a74befc4a4dab4c5032d64fcf9723b67e73ae9d5280fb9fb54f225febba03fe. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	9a74befc4a4dab4c5032d64fcf9723b67e73ae9d5280fb9fb54f225febba03fe
SHA3-384 hash:	f0daa5ea329de8aed4532281d86201ed860f524a5b80b352ef609dd9e54919f0a8919089ab17e3e30a316172cb103727
SHA1 hash:	152790a2002b56eec9f76e2b02505941c839ae49
MD5 hash:	dcf3dd37ddbe4f8cab9283464afd53f6
humanhash:	four-early-mexico-comet
File name:	Inv_from_Inc_671242.pdf
Download:	download sample
File size:	52'230 bytes
First seen:	2023-07-12 04:35:17 UTC
Last seen:	Never
File type:	pdf
MIME type:	application/pdf
ssdeep	768:2Hb2YZzHsws8m6Gd/Hd4Hl/H3JIbfEtoH9JvD3kJ+xLZh3/ZrocrmjgFA7vyRsVm:2JNsw//XJIbfDHbAy91TYTVve
TLSH	T17A33E158E786E94C809342C5E5F93AC9470DF3632DD4E8D134FE4AAA2B20DED6A73241
Reporter	JAMESWT_WT
Tags:	LLC-250215 pdf

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

402

Origin country :

IT

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

Sanesecurity.Malware.29709.PdfHeur.UNOFFICIAL

Alert

Create hunting rule

DocGuard Suspicious

Result

Verdict:

Suspicious

File Type:

PDF File

Link:

https://app.docguard.net/9a74befc4a4dab4c5032d64fcf9723b67e73ae9d5280fb9fb54f225febba03fe/results/dashboard

FileScan.IO No Threat

Verdict:

No Threat

Threat level:

  2/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/64ae2db32f8c5654cdd9e6c4/reports/6542f40e-1e73-47a6-b3eb-394abeefd6c7/overview

Hybrid Analysis PDF/Phishing

Verdict:

Suspicious

Labled as:

PDF/Phishing

Link:

https://www.hybrid-analysis.com/sample/9a74befc4a4dab4c5032d64fcf9723b67e73ae9d5280fb9fb54f225febba03fe

inlyse Malware.AI Benign

Label:

Benign

Suspicious Score:

4/10

Score Malicious:

4%

Score Benign:

96%

Link:

https://www.malware.ai/gui/files/?id=4b4dba4a-656e-4c38-95b2-f777df026052

Joe Sandbox clean

Result

Threat name:

n/a

Detection:

clean

Classification:

n/a

Score:

0 / 100

Link:

https://www.joesandbox.com/analysis/1271375

Behaviour

Behavior Graph:

n/a

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/9a74befc4a4dab4c5032d64fcf9723b67e73ae9d5280fb9fb54f225febba03fe/

ReversingLabs TitaniumCloud Document-PDF.Trojan.Heuristic

Threat name:

Document-PDF.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2023-07-11 15:50:29 UTC

File Type:

Document

Extracted files:

7

AV detection:

8 of 37 (21.62%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=tj2l57ckjwvuyubs2zh47fzdwz7hhlu5kkapxh5vj4rf7252ap7a._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.