MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 bcdb27fdd0be93b3546deb0f1ab99fe935d4f87acbb3d6874303a1992a9ea8bf. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: bcdb27fdd0be93b3546deb0f1ab99fe935d4f87acbb3d6874303a1992a9ea8bf
SHA3-384 hash: 83a319d2241699ed9d68c6329414b485d7cc5928bf6cdea01cec304fdbad3ab5b8f6034f564e33b729e8a950dc4e0074
SHA1 hash: 5bbb7a6430110ec891d4cb68fc42dcadf7cd1d49
MD5 hash: 82a397472237d404d4602b6bfebdd4c7
humanhash: whiskey-arizona-florida-tennessee
File name:SDI_ORIENT PLASTIC- IPS HP9450 32MT_doc.zip
Download: download sample
File size:506'360 bytes
First seen:2020-10-14 15:03:04 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:cnQdEZpHPPMIYFz7sRW6BHJI0qtZ/qDQhdYEPOkdU:cOEHHsIta0qfC0PJdU
TLSH C1B423EB7385C21A4B50DD18E97279F1BC4B6C833F2F2E8087906F6702765047D5AEA6
Reporter abuse_ch
Tags:zip


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: sptme.com
Sending IP: 45.137.22.72
From: Karen Trinidad <karen@sptme.com>
Subject: RE: Your order for 2fcl of HP9450 from Formosa
Attachment: SDI_ORIENT PLASTIC- IPS HP9450 32MT_doc.zip (contains "SDI_ORIENT PLASTIC- IPS HP9450 32MT_doc.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
60
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25081.ZipHeur.BadExt.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/bcdb27fdd0be93b3546deb0f1ab99fe935d4f87acbb3d6874303a1992a9ea8bf/
Threat name:
Win32.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2020-10-14 00:57:07 UTC
AV detection:
6 of 48 (12.50%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=xtnsp7oqx2j3gvdn5mhrvom75e25j6d2zoz5nb2daoqzsku6vc7q._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Kryptik
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/bcdb27fdd0be93b3546deb0f1ab99fe935d4f87acbb3d6874303a1992a9ea8bf

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

zip bcdb27fdd0be93b3546deb0f1ab99fe935d4f87acbb3d6874303a1992a9ea8bf

(this sample)

Executable exe fe15f4f81105e03404643fa842168b56482ea6e6772c95f0ffb56c0b0f69678f

  
Dropping
MD5 9b1858a9f8aa22c79e92475e59103f50
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 fe15f4f81105e03404643fa842168b56482ea6e6772c95f0ffb56c0b0f69678f

Comments