MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 bb37f3f6290e9e1d40e57b8f8f3088a000ff399564f13ec8709c68efc23120f8. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
M00nD3v
Vendor detections: 2
| SHA256 hash: | bb37f3f6290e9e1d40e57b8f8f3088a000ff399564f13ec8709c68efc23120f8 |
|---|---|
| SHA3-384 hash: | be84afa6ac8d698c5b5dc007b6579c6dfcbbbd2f2af69152e0c679913ef6fddfedf6c96586c6e47caae0a9c9faeae0a8 |
| SHA1 hash: | 2831b502f51ecd0f4295052b289108cb87721ea9 |
| MD5 hash: | 10691fb5f63e41aeae17385bfa29ca03 |
| humanhash: | crazy-single-december-equal |
| File name: | PROJECT-0039382.rar |
| Download: | download sample |
| Signature | M00nD3v |
| File size: | 337'516 bytes |
| First seen: | 2020-05-25 12:56:48 UTC |
| Last seen: | Never |
| File type: | rar |
| MIME type: | application/x-rar |
| ssdeep | 6144:SHPBtVlEoICF5emdp7haRRJgi8QPYZKJ9VgW/fW33xY0Jz23/cYamQ5/enWqdZ:SHP5H5bXaJVtSAV1WxY0Jzg/aIW2Z |
| TLSH | 527423B716AACD4BDC2A8998194ECDD7DCD640AFB30943F2125A9D34437922FC2356CB |
| Reporter |  abuse_ch |
| Tags: | M00nD3v rar |
abuse_ch
Malspam distributing unidentified malware:HELO: ebro.at
Sending IP: 37.49.230.192
From: Herbert RUMPLER <H.Rumpler@ebro.at>
Reply-To: herbert@beccltd.com
Subject: INQUIRY - our project-no. 63998
Attachment: PROJECT-0039382.rar (contains "PROJECT-0039382.exe")
Intelligence
File Origin
# of uploads :
1
# of downloads :
68
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Status:
Malicious
First seen:
2020-05-25 13:37:02 UTC
File Type:
Binary (Archive)
Extracted files:
9
AV detection:
19 of 48 (39.58%)
Threat level:
5/5
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.