MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b115f4f7ae44a67f1f0f5c4c065e8d219f88316dbbddcb4d539a85d22e2444fd. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: b115f4f7ae44a67f1f0f5c4c065e8d219f88316dbbddcb4d539a85d22e2444fd
SHA3-384 hash: fb952d0b86d69f8e130e52b6c43792c08c57c14c2bbb91a0e66a3b313a20c717df8547edc3c26938ad4928fe8ef866ce
SHA1 hash: 29b3fbbf1ba9cac4715a9b1b948db20025bf4fad
MD5 hash: 5bc6c916ef468a08cbe6e978b4a764d3
humanhash: mountain-white-papa-crazy
File name:8342027482.rar
Download: download sample
File size:545'999 bytes
First seen:2020-10-15 10:55:11 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:Yiwt5YZV26+/olelAetybvotp72LQIGbChVnZmHGPhwppktzU:hwt5sI6VleWecbvypyQIjFZmHGPhwpp5
TLSH DCC423ACBD656024BCB8CEF4DDA9031541EADDB22B9B9202ED8124BA5D190F734F1C6D
Reporter abuse_ch
Tags:rar


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: ns3022570.ip-51-254-199.eu
Sending IP: 51.254.199.53
From: effactura.placo@saint-gobain.com
Subject: SG–Placo-eFactura 8342027482_2001998_(20201014)
Attachment: 8342027482.rar (contains "h5521CZBe30yV4B.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
67
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/b115f4f7ae44a67f1f0f5c4c065e8d219f88316dbbddcb4d539a85d22e2444fd/
Threat name:
ByteCode-MSIL.Trojan.CryptInject
Create hunting rule
Status:
Malicious
First seen:
2020-10-14 19:57:09 UTC
AV detection:
10 of 48 (20.83%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=wek7j55oisth6hyplrgamxunegpyqmlnxpo4wtkttkc5elreit6q._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/b115f4f7ae44a67f1f0f5c4c065e8d219f88316dbbddcb4d539a85d22e2444fd

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

rar b115f4f7ae44a67f1f0f5c4c065e8d219f88316dbbddcb4d539a85d22e2444fd

(this sample)

Executable exe 5e535e14d9c68eeead0a2b8067ba00220f65457edfbab0a83d8654f2d1f4cf47

  
Dropping
MD5 838488cba2335ebd36779c79b892a04f
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 5e535e14d9c68eeead0a2b8067ba00220f65457edfbab0a83d8654f2d1f4cf47

Comments