MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 bdfb76a72307ccc7cc38d4ce1fc7ada5ca80b86a45ad6fdf57b80166138e6479. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: bdfb76a72307ccc7cc38d4ce1fc7ada5ca80b86a45ad6fdf57b80166138e6479
SHA3-384 hash: e0fdd3f79cf51f31677547ca338d97430b4a5691f1cf8ec5f844af1402b3691e2b2186c84d0b346cf5b067f7b96f521f
SHA1 hash: 0588d7e9805386f3122ecb625a51bc7148e7b9a2
MD5 hash: ede3d86832b86c8204a43eeb0331145d
humanhash: red-emma-saturn-arizona
File name:PAYMENT ADVICE.gz
Download: download sample
File size:544'603 bytes
First seen:2020-10-09 06:05:12 UTC
Last seen:Never
File type: gz
MIME type:application/gzip
ssdeep 12288:ePlShGBwb6GJGpg1wDeKNvDJRB45mO/LhWJDXVhGC:ePlShGxpbZlDG5HhWVGC
TLSH 2DC4232DB33DE0E274D3B37820CE155A5FDE51C8E6446A0AD5FAEE42A3D1B2C15993E0
Reporter abuse_ch
Tags:gz


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: cloud.konnectdigital.com.au
Sending IP: 223.27.23.32
From: Standard Chartered Bank <notice@sc.com>
Subject: RE: PayeeAdvice Q0016558_05671
Attachment: PAYMENT ADVICE.gz (contains "gunzipped")

Intelligence

File Origin
# of uploads :
1
# of downloads :
78
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/bdfb76a72307ccc7cc38d4ce1fc7ada5ca80b86a45ad6fdf57b80166138e6479/
Threat name:
ByteCode-MSIL.Trojan.Generic
Create hunting rule
Status:
Malicious
First seen:
2020-10-08 18:17:23 UTC
AV detection:
24 of 48 (50.00%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=xx5xnjzda7gmptby2thb7r5nuxfibodkiwww7x2xxaawme4omr4q._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.48
Link:
https://yomi.yoroi.company/submissions/bdfb76a72307ccc7cc38d4ce1fc7ada5ca80b86a45ad6fdf57b80166138e6479

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

gz bdfb76a72307ccc7cc38d4ce1fc7ada5ca80b86a45ad6fdf57b80166138e6479

(this sample)

Executable exe 610f4f2acdb9c56891456e3ed0697c9b0d48826ab040fc50c510c5e0381347de

  
Dropping
MD5 059735a4b733c56b96e024d1a26e7852
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 610f4f2acdb9c56891456e3ed0697c9b0d48826ab040fc50c510c5e0381347de

Comments