MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b2bc1fa2940a52448ae2842037cb0cc1ce0fa5749be2a7de4b65c1943756c37f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: b2bc1fa2940a52448ae2842037cb0cc1ce0fa5749be2a7de4b65c1943756c37f
SHA3-384 hash: d3f7fad18678f5ef3ee5446c991d3a6ede455eb6d532e535aad6ffda28030060c82f53671afed7ad54c4f48bc44da474
SHA1 hash: 2c11523812971557653cef61ffc3f834d7f6a159
MD5 hash: c12500baf869494ce517ffc65476ad20
humanhash: eight-yellow-bacon-oranges
File name:BL 204103842 (2).rar
Download: download sample
File size:464'608 bytes
First seen:2021-01-26 06:36:00 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:zZJD2Fl+cQoUt/2B/d3NwNI+f12FlWb6w6FRu2o:zZJDQ3UtmNNwGQ12Fl01GY
TLSH DBA423CC5ADF890BD296A38D4A9C261C78373D2B8D145033119ED774BEA13B46ABE247
Reporter cocaman
Tags:rar


Avatar
cocaman
Malicious email (T1566.001)
From: "Dina Hossam <dina.hossam@dhl.com>" (likely spoofed)
Received: "from box.dertysm.xyz (box.dertysm.xyz [134.122.14.245]) "
Date: "Mon, 25 Jan 2021 17:07:25 -0600"
Subject: "AWB Copy ,6020154744"
Attachment: "BL 204103842 (2).rar"

Intelligence

File Origin
# of uploads :
1
# of downloads :
116
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Heur.23373.7420.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/b2bc1fa2940a52448ae2842037cb0cc1ce0fa5749be2a7de4b65c1943756c37f/
Threat name:
Win32.Trojan.Pwsx
Create hunting rule
Status:
Malicious
First seen:
2021-01-26 00:03:05 UTC
File Type:
Binary (Archive)
Extracted files:
18
AV detection:
4 of 46 (8.70%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=wk6b7iuubjjejcxcqqqdpsymyhha7jlutprkpxslmxazin2wyn7q._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/b2bc1fa2940a52448ae2842037cb0cc1ce0fa5749be2a7de4b65c1943756c37f

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

rar b2bc1fa2940a52448ae2842037cb0cc1ce0fa5749be2a7de4b65c1943756c37f

(this sample)

Executable exe 77d54c4049d7d7beca2c7f4897882ca793587b22def49d1b2268f6707a17285a

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 77d54c4049d7d7beca2c7f4897882ca793587b22def49d1b2268f6707a17285a

Comments