MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ab703a3bc7d05c62bcc127febfd82a7903a47f45664b5195ada070eb748d5b25. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 8


Intelligence 8 IOCs YARA File information Comments

SHA256 hash: ab703a3bc7d05c62bcc127febfd82a7903a47f45664b5195ada070eb748d5b25
SHA3-384 hash: 17d75c00eec43c3a787eb6377436ea348b394fcb603481f10c9b45ec533307ad70eff82b6721f519bdb02a3cf48fc94b
SHA1 hash: e3d233a6f3ab8664afa6d9986121ce11e1b09d71
MD5 hash: bf91b5849a091111ddc49dfaf58f5ebd
humanhash: whiskey-mockingbird-lactose-bakerloo
File name:BankIn Receipt.scr
Download: download sample
File size:1'576'960 bytes
First seen:2020-08-19 14:17:06 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 2f095340e94ca508e3b83fb009ebf4cc (18 x Renamer)
ssdeep 24576:ycCT67wHqWis4l+jIACFr5hqjiLDpSJDN93pqb6W8cU4gLQ2A:DCpn8t74iA3qb6W8cU4F
Threatray 5 similar samples on MalwareBazaar
TLSH AC75010BADEB1167FC552B71D02248B310FBF9F60E468722B6E1E70D2B70FA155394A6
Reporter abuse_ch
Tags:scr

Intelligence


File Origin
# of uploads :
1
# of downloads :
73
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a window
Sending a UDP request
Result
Threat name:
Unknown
Detection:
suspicious
Classification:
n/a
Score:
21 / 100
Signature
a
c
d
e
f
g
h
i
L
M
n
o
p
r
s
t
Behaviour
Behavior Graph:
Threat name:
Win32.Trojan.DistTrack
Status:
Malicious
First seen:
2020-08-19 14:19:05 UTC
AV detection:
28 of 29 (96.55%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Behaviour
Suspicious use of SetWindowsHookEx
Suspicious use of SetWindowsHookEx
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Executable exe ab703a3bc7d05c62bcc127febfd82a7903a47f45664b5195ada070eb748d5b25

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments