MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 bc088a408c39cfec5eaed5c5a05d12d7a45ce59b8af682314edd514908e04a7e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 7
| SHA256 hash: | bc088a408c39cfec5eaed5c5a05d12d7a45ce59b8af682314edd514908e04a7e |
|---|---|
| SHA3-384 hash: | 7f72c39899994a1fdde1642c51aa45fc4a6d7c3ec284f09171323cd23afe373ee14c8f9a75b0b7f3769afe993a25a30e |
| SHA1 hash: | 804b1711a92dae6d7b206450175fabf7be76392c |
| MD5 hash: | a430f2132ed78ff72663823171332bed |
| humanhash: | uranus-table-floor-grey |
| File name: | test.bef_fri |
| Download: | download sample |
| File size: | 24'531 bytes |
| First seen: | 2026-08-14 06:23:21 UTC |
| Last seen: | Never |
| File type: |  rtf |
| MIME type: | text/rtf |
| ssdeep | 384:9TbW6ZrDgpQdk1fxBxlmjvdaN7UCOqcKqjRcPiycvFGLziMCioaWNmPTLoQu6:93BrcSd5U2COqcfjRXJkCsosPC6 |
| TLSH | T18CB2F1DE80185CC147D374BD6BD4AF0907D6E24C2ECDB8A093AE9A4EE0D4687C77255B |
| TrID | 83.3% (.RTF) Rich Text Format (5000/1) 16.6% (.JSON) JSON object (generic) (1000/1) |
| Magika | gzip |
| Reporter |  abuse_ch |
| Tags: | rtf |
Intelligence
File Origin
# of uploads :
1
# of downloads :
196
Origin country :
DEVendor Threat Intelligence
Malware configuration found for:
MSO
Details
Malware family:
n/a
ID:
1
File name:
http://217.60.36.94/chess/test.bef_fri
Verdict:
No threats detected
Analysis date:
2026-07-30 19:27:59 UTC
Tags:
opendir
Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Verdict:
Legit
File type:
application/rtf
Has a screenshot:
False
Contains macros:
False
Detection(s):
Verdict:
Clean
Score:
99.9%
Tags:
n/a
Result
Verdict:
Clean
Maliciousness:
Result
Verdict:
Malicious
File Type:
RTF File
Verdict:
Malicious
Threat level:
10/10
Confidence:
100%
Verdict:
Clean
File Type:
rtf
First seen:
2026-08-14T03:45:00Z UTC
Last seen:
2026-08-15T03:30:00Z UTC
Hits:
~10
Result
Threat name:
n/a
Detection:
suspicious
Classification:
evad
Score:
23 / 100
Signature
Office drops RTF file
Behaviour
Behavior Graph:
Threat name:
Document.Trojan.Heuristic
Status:
Malicious
First seen:
2026-07-06 10:42:25 UTC
File Type:
Document
Extracted files:
1
AV detection:
3 of 24 (12.50%)
Threat level:
2/5
Detection(s):
Suspicious file
Result
Malware family:
n/a
Score:
1/10
Tags:
n/a
Behaviour
Checks processor information in registry
Enumerates system info in registry
Suspicious behavior: AddClipboardFormatListener
Suspicious use of SetWindowsHookEx
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
rtf bc088a408c39cfec5eaed5c5a05d12d7a45ce59b8af682314edd514908e04a7e
(this sample)
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.