MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a669fb6f68b20ea127dfc334951bcacdd6a3de7136b554f382b4437d4a0b5626. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


BlackShades


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a669fb6f68b20ea127dfc334951bcacdd6a3de7136b554f382b4437d4a0b5626
SHA3-384 hash: 466d97eb2b9e23eb8186ec1fb0388771bf78113a19f05f0987b9975a361ad40651b7234a568f591834d4432c0eb37890
SHA1 hash: 96a1b9aadca2ae41535e45fb09be8d470259858a
MD5 hash: 888aa83c0a5e6bd98992c40fffc5f450
humanhash: cup-massachusetts-zebra-echo
File name:DHL Shipment Doc.ace
Download: download sample
Signature BlackShades
Create hunting rule
File size:75'040 bytes
First seen:2020-06-04 04:37:35 UTC
Last seen:Never
File type: ace
MIME type:application/octet-stream
ssdeep 1536:PQ9azohGaEy/GtwKM/heZ+9tN+FylMAFXiElLu/Xr0MbnvRAIkaWVn:PQ9auGaRx7/hb8FydkElQXYMjipaWVn
TLSH 337302B905E16FD8C0DC0A09AE231EA1B2F2A030D1826659720BEDF2EC1D55AD6243FD
Reporter jarumlus

Intelligence

File Origin
# of uploads :
1
# of downloads :
74
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25165.AceHeur.Scr.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-scr.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-06-03 19:47:00 UTC
AV detection:
12 of 31 (38.71%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

BlackShades

ace a669fb6f68b20ea127dfc334951bcacdd6a3de7136b554f382b4437d4a0b5626

(this sample)

BlackShades

Executable exe c1ccf8689de88be32890345e454df2f1fa90e1e4033c0f63425001af42f7aef5

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 c1ccf8689de88be32890345e454df2f1fa90e1e4033c0f63425001af42f7aef5
  
Dropping
MD5 420992774956df11eea2992aa4921241

Comments