MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 afcdaa5f4dbaf3b50b66e64e1a6d9859e73b87ebc62ede17c6f3706eaab41105. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	afcdaa5f4dbaf3b50b66e64e1a6d9859e73b87ebc62ede17c6f3706eaab41105
SHA3-384 hash:	b7974ce1a83727cc81ff2872b8cf52ae57a14a0f8b5085192294af65d2f57d6a42a2c8aa69478e0322750a61d277ce29
SHA1 hash:	85ce0baa70cc105a1c200e2c6da2edb79fb533ed
MD5 hash:	570e635e06f3dc985b153bf1ed92b17b
humanhash:	chicken-kitten-monkey-carolina
File name:	Aut.pdf
Download:	download sample
Signature	Quakbot Alert Create hunting rule
File size:	14'993 bytes
First seen:	2023-05-02 22:45:09 UTC
Last seen:	Never
File type:	pdf
MIME type:	application/pdf
ssdeep	384:ifnK6MHK9EH8vDtWT23u1QYa+agF8sLvAcPSP/PK15u181:ifnKzK9mqDtWrQj+agasLvAuA/AuG1
TLSH	T16562C078AD5CD4EFFD438D04C81A3656839D311306C97970C6248B85F944DEAFAA2E5B
Reporter	rmceoin
Tags:	pdf Qakbot qbot Quakbot

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

479

Origin country :

US

Vendor Threat Intelligence

DocGuard Suspicious

Result

Verdict:

Suspicious

File Type:

PDF File

Link:

https://app.docguard.net/afcdaa5f4dbaf3b50b66e64e1a6d9859e73b87ebc62ede17c6f3706eaab41105/results/dashboard

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

remote

Link:

https://www.filescan.io/uploads/645192abedfde86c79816114/reports/c604e746-8c8a-4f62-9b2e-0912e30d9ef2/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/afcdaa5f4dbaf3b50b66e64e1a6d9859e73b87ebc62ede17c6f3706eaab41105

inlyse Malware.AI Malicious

Label:

Malicious

Suspicious Score:

9.6/10

Score Malicious:

97%

Score Benign:

3%

Link:

https://www.malware.ai/gui/files/?id=0f10605c-46b2-47a1-b780-ba1ed5a8945d

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/afcdaa5f4dbaf3b50b66e64e1a6d9859e73b87ebc62ede17c6f3706eaab41105/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=v7g2ux2nxlz3kc3g4zhbu3mylhttxb7lyyxn4f6g6nyg5kvucecq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Qakbot

Threat name:

Qakbot

Score:

0.90

Link:

https://yomi.yoroi.company/submissions/afcdaa5f4dbaf3b50b66e64e1a6d9859e73b87ebc62ede17c6f3706eaab41105