MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a341f8b536950136c00b274f819cf48fa486b83e1565d8ebc602a3c732168562. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a341f8b536950136c00b274f819cf48fa486b83e1565d8ebc602a3c732168562
SHA3-384 hash: 8c5fcc4a511bf23678d3f05c4fee742a5c201eb16d1749fcf2b34908874dc83c0401787e8abcfdef9cadfe64347a7ff1
SHA1 hash: e8ff271b80055873c3ee398d04994d62b636bcf4
MD5 hash: aca12c380531074e0add9646c457425f
humanhash: eight-sierra-uniform-india
File name:Nota prawna NIE 488284-19-01-2021_PDF.zip
Download: download sample
File size:1'696'244 bytes
First seen:2021-01-19 12:53:11 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 24576:u6pJ0FTRUIIrda4hka7ohj82SkNV4JI9Gv2f+XofzCud50YB2RyZ4VtZykFSNllo:ZGV8a4hkhoyAOGgLnsRHtZaN76v/
TLSH 277533F705C1E46CCD81A97D4DFDAC9F6A8C2E30E13596B5A4C984A850DCD3E20ECA6D
Reporter abuse_ch
Tags:zip


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: mail.webhome.at
Sending IP: 82.150.199.20
From: HCG INDUSTRIAL SOLICITORS <clients@lawyerspoland.eu>
Reply-To: result.box2019@mail.com
Subject: Spóźniony rachunek / Nota prawna / TOP PILNE
Attachment: Nota prawna NIE 488284-19-01-2021_PDF.zip (contains "Nota prawna NIE 488284-19-01-2021_PDF.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
116
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Foxhole.Zip_badexts14.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/a341f8b536950136c00b274f819cf48fa486b83e1565d8ebc602a3c732168562/
Threat name:
Win32.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2021-01-19 12:54:05 UTC
AV detection:
8 of 46 (17.39%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=una7rnjwsuatnqale5hydhhur6sinob6cvs5r26gakr4omqwqvra._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.35
Link:
https://yomi.yoroi.company/submissions/a341f8b536950136c00b274f819cf48fa486b83e1565d8ebc602a3c732168562

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

zip a341f8b536950136c00b274f819cf48fa486b83e1565d8ebc602a3c732168562

(this sample)

Executable exe 06a32aea1eaf6cf33642cf66072ad0aa34b6bbf1c67130819647eba1c42ba595

  
Dropping
MD5 1cf525b06e13987e499629d60897017c
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 06a32aea1eaf6cf33642cf66072ad0aa34b6bbf1c67130819647eba1c42ba595

Comments