MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 aebac18cfc24be9a2ca30ba18b37162cbeb78cc056a79c0cd159851736ef42cf. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	aebac18cfc24be9a2ca30ba18b37162cbeb78cc056a79c0cd159851736ef42cf
SHA3-384 hash:	8df479310a5cb3cd00a3002e98a8699919b11d471d533e7660cb1661452cc6911379fdf5f5980cd3b0dad0d1b5ce8314
SHA1 hash:	a3e5f36a6c6aa8d153a311c66de474a8b21a6684
MD5 hash:	a829c233af21dcbba7a8f3d5e5f0e937
humanhash:	orange-oklahoma-ceiling-foxtrot
File name:	Tractor Supply CO _ Yeti Crossroads Backpack.docx
Download:	download sample
File size:	157'131 bytes
First seen:	2024-08-01 19:41:08 UTC
Last seen:	Never
File type:	pdf
MIME type:	application/pdf
ssdeep	3072:VTySNp0OuTc4PRxOK/MNs4AsyBi7H90yrBAyhYMs5VrZTr:/pjEPREAM7DAi7H90yrBPixx
TLSH	T1B3E3122A9B8A90DDE5C77286FCBACE5FD08AF0E00350D9C4242DC9935C95F59D9B3683
Reporter	smica83
Tags:	pdf UKR

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

328

Origin country :

HU

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

90.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=66abe50d037b02d0daecfb0a

Tags:

n/a

DocGuard Malicious

Result

Verdict:

Malicious

File Type:

PDF File

Link:

https://app.docguard.net/aebac18cfc24be9a2ca30ba18b37162cbeb78cc056a79c0cd159851736ef42cf/results/dashboard

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

  10/10

Confidence:

100%

Tags:

masquerade

Link:

https://www.filescan.io/uploads/66abe50c78d5c73fb1cabdb3/reports/53e9e192-f8ac-43b2-9aa6-abebfc577fbf/overview

Hybrid Analysis TR/AVI.Agent

Verdict:

Suspicious

Labled as:

TR/AVI.Agent

Link:

https://www.hybrid-analysis.com/sample/aebac18cfc24be9a2ca30ba18b37162cbeb78cc056a79c0cd159851736ef42cf

inlyse Malware.AI

Gathering data

Joe Sandbox clean

Result

Threat name:

n/a

Detection:

clean

Classification:

n/a

Score:

2 / 100

Link:

https://www.joesandbox.com/analysis/1484271

Behaviour

Behavior Graph:

n/a

Nucleon Malprob Benign

Score:

3%

Verdict:

Benign

File Type:

PDF

Link:

https://malprob.io/report/aebac18cfc24be9a2ca30ba18b37162cbeb78cc056a79c0cd159851736ef42cf

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/aebac18cfc24be9a2ca30ba18b37162cbeb78cc056a79c0cd159851736ef42cf/

ReversingLabs TitaniumCloud Document-PDF.Trojan.Malgent

Threat name:

Document-PDF.Trojan.Malgent

Alert

Create hunting rule

Status:

Malicious

First seen:

2024-07-27 02:10:14 UTC

File Type:

Document

Extracted files:

16

AV detection:

6 of 38 (15.79%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=v25mddh4es7julfdboqywnywfs7lpdgak2tzydgrlgcronxpilhq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.20

Link:

https://yomi.yoroi.company/submissions/aebac18cfc24be9a2ca30ba18b37162cbeb78cc056a79c0cd159851736ef42cf