MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b87cf8c2619dc99fbaa712f3f120fd7b27c93268bcc39c30dd459dfb68ef7231. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	b87cf8c2619dc99fbaa712f3f120fd7b27c93268bcc39c30dd459dfb68ef7231
SHA3-384 hash:	ecb27295906032e9ac909ed7b2d0f84de172fde237c312ccc24be148a221606b40350eab8e4df317dac96a62c9afc66a
SHA1 hash:	85b01fafc385df83e39beef92388c00cadc630ef
MD5 hash:	1e6a8dcb5d913cfb17f29fc216aea61f
humanhash:	glucose-papa-island-edward
File name:	1e6a8dcb5d913cfb17f29fc216aea61f_a_Invoice_8392_from_Spartan Energy Corp..pdf
Download:	download sample
File size:	10'835 bytes
First seen:	2024-03-21 12:08:51 UTC
Last seen:	Never
File type:	pdf
MIME type:	application/pdf
ssdeep	192:NdV79LWPmWaqPHkKp20LAjc3gboBZBm0FyKvKqVxutOa1Sf:rVhLJWaqPH+01fZBm0FyWut5K
TLSH	T1DB229EE26C3B1C1D93410EA1A98B0B8A1088A4970E5AD673DCC65767389D9E5FC2D2F1
Reporter	adrian__luca
Tags:	pdf

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

438

Origin country :

HU

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.PDF.PhishingX-gen.23635.568.UNOFFICIAL

Alert

Create hunting rule

DocGuard Clean

Result

Verdict:

Clean

File Type:

PDF File

Link:

https://app.docguard.net/b87cf8c2619dc99fbaa712f3f120fd7b27c93268bcc39c30dd459dfb68ef7231/results/dashboard

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

masquerade scam

Link:

https://www.filescan.io/uploads/65fc23650ef6f5eba495c957/reports/343c0ec5-d3a3-4873-ad59-a8a062e39852/overview

Hybrid Analysis TR/AVI.Scam

Verdict:

Suspicious

Labled as:

TR/AVI.Scam

Link:

https://www.hybrid-analysis.com/sample/b87cf8c2619dc99fbaa712f3f120fd7b27c93268bcc39c30dd459dfb68ef7231

inlyse Malware.AI Benign

Label:

Benign

Suspicious Score:

4.8/10

Score Malicious:

48%

Score Benign:

52%

Link:

https://www.malware.ai/gui/files/?id=477ffa4e-9c4c-42cf-bea7-cae3a08f364f

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

56 / 100

Link:

https://www.joesandbox.com/analysis/1413190

Signature

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Behaviour

Behavior Graph:

Download SVG

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/b87cf8c2619dc99fbaa712f3f120fd7b27c93268bcc39c30dd459dfb68ef7231/

ReversingLabs TitaniumCloud Document-PDF.Trojan.Scam

Threat name:

Document-PDF.Trojan.Scam

Alert

Create hunting rule

Status:

Malicious

First seen:

2024-03-20 15:03:01 UTC

File Type:

Document

Extracted files:

7

AV detection:

5 of 38 (13.16%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=xb6prqtbtxez7ovhclz7cih5pmt4smtixtbzymg5iwo7w2hpoiyq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/b87cf8c2619dc99fbaa712f3f120fd7b27c93268bcc39c30dd459dfb68ef7231