MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b75a466ea397e931759efabb36c0a2fa7ab41024ebe0d463d95c475745d5a665. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


HawkEye


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: b75a466ea397e931759efabb36c0a2fa7ab41024ebe0d463d95c475745d5a665
SHA3-384 hash: cbd4242be729fb8bc58f722117b46d887ce38f2d8bec95627e3ad1231cf1d8269487e0a1d4f1094ef5496ac796e7ca59
SHA1 hash: 5da3a18bb92fded8c7baebf26651cec04f18eae9
MD5 hash: 804b2c94d2eb4956315fdc8b844cef64
humanhash: cold-alpha-fish-single
File name:Bank-transfer-20200002406-pdf.gz
Download: download sample
Signature HawkEye
Create hunting rule
File size:334'093 bytes
First seen:2020-06-24 08:54:25 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:CZfUivz21QF9547U7jG5HJMN2L7kMqipr7nNbVg+aTAl89KzKwJi:CCivHF9UZJrRqiZ7bgh+Ji
TLSH FB642330D4B4E8BA871CBD6EE4FBCC2E74B01707494B468F5CE753E2AA751E5DA48122
Reporter jarumlus
Tags:HawkEye

Intelligence

File Origin
# of uploads :
1
# of downloads :
77
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Adware.Slugin-6803969-0
Create hunting rule

PUA.Win.Adware.Slugin-6840354-0
Create hunting rule

Sanesecurity.Malware.25906.ZipHeur.BadExt.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/b75a466ea397e931759efabb36c0a2fa7ab41024ebe0d463d95c475745d5a665/
Threat name:
Win32.Trojan.CryptInject
Create hunting rule
Status:
Malicious
First seen:
2020-06-24 08:56:05 UTC
AV detection:
24 of 31 (77.42%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=w5nem3vds7utc5m67k5tnqfc7j5liebe5pqniy6zlrdvorovuzsq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

HawkEye

zip b75a466ea397e931759efabb36c0a2fa7ab41024ebe0d463d95c475745d5a665

(this sample)

HawkEye

Executable exe 03858ed158440d03ed25802a74b88cc2091960e35ded3901d4d0370c88a38d9f

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 03858ed158440d03ed25802a74b88cc2091960e35ded3901d4d0370c88a38d9f
  
Dropping
MD5 64608c10963edfeacdeddc9449e66e5f

Comments