MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b050545a7ffcbbcf96dc79354a6988fcc2f55bc76b67b59eaab36e7d238a7f62. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: b050545a7ffcbbcf96dc79354a6988fcc2f55bc76b67b59eaab36e7d238a7f62
SHA3-384 hash: f48c3b3f392f4019223ee53cbdcfedcbf30184fa0f95ddc85ad2bc29e5e5a1fbddc187018f726fd531b0026bf7cc400b
SHA1 hash: eadac5a834a62a432a10f45c47fba1a3cdec1e3d
MD5 hash: 28c0a2b0968996e6780f3095729ebe22
humanhash: bluebird-fruit-mirror-sad
File name:b050545a7ffcbbcf96dc79354a6988fcc2f55bc76b67b59eaab36e7d238a7f62
Download: download sample
File size:287'744 bytes
First seen:2020-08-25 14:14:47 UTC
Last seen:2020-08-25 15:06:05 UTC
File type:Word file docx
MIME type:application/msword
ssdeep 6144:vqeZW6uUGwGOMpsdmQsNW/74kGldaeoEISB:vqdlUvfMeETNCkkNt
TLSH E854CF627391F932D5570435EC06C3E9A626FE499FA5829B30C13F2FB9325212A53FD2
Reporter JAMESWT_WT

Intelligence

File Origin
# of uploads :
2
# of downloads :
85
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Heur.4070.23921.UNOFFICIAL
Create hunting rule

Result
Verdict:
Clean
Maliciousness:

Behaviour
Creating a window
Result
Threat name:
Unknown
Detection:
malicious
Classification:
n/a
Score:
48 / 100
Link:
https://www.joesandbox.com/analysis/449270
Signature
(
)
.
a
b
c
d
e
f
g
i
l
m
n
O
p
r
s
t
u
v
X
y
Behaviour
Behavior Graph:
Download SVG
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/b050545a7ffcbbcf96dc79354a6988fcc2f55bc76b67b59eaab36e7d238a7f62/
Threat name:
Document-Word.Trojan.Disable
Create hunting rule
Status:
Malicious
First seen:
2019-01-29 12:15:06 UTC
File Type:
Document
Extracted files:
19
AV detection:
9 of 29 (31.03%)
Threat level:
  5/5
Result
Malware family:
n/a
Score:
  8/10
Tags:
macro
Link:
https://tria.ge/reports/200825-mjs4k12nf2/
Behaviour
Office macro that triggers on suspicious action
Suspicious Office macro
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.60
Link:
https://yomi.yoroi.company/submissions/b050545a7ffcbbcf96dc79354a6988fcc2f55bc76b67b59eaab36e7d238a7f62

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments