MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 bee3ef295e3b467cfac5aab779cf9018b64872f0761961af673b66fa6137f149. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: bee3ef295e3b467cfac5aab779cf9018b64872f0761961af673b66fa6137f149
SHA3-384 hash: 45b2a8eed0cf5ef4b0ee1f50e5a43c85012894c1988833b378b4de1dd1ff51e400f0d5b372a42a15039f3d129bf43a5a
SHA1 hash: b19ba9d4885e393af723aeb4907703a097bf0c12
MD5 hash: d690893619bfd9a74522a351481f80ab
humanhash: shade-burger-texas-cup
File name:bee3ef295e3b467cfac5aab779cf9018b64872f0761961af673b66fa6137f149
Download: download sample
File size:127'038 bytes
First seen:2020-03-29 08:17:31 UTC
Last seen:Never
File type:unknown
MIME type:application/octet-stream
ssdeep 3072:vEVAHQqprDuG8xheY3P9jhytOxPaf5vEPWLNyEyuKmQSpeBU/mNj:vUAHb5j6heA9ly8xPalLcEZdpeW0j
TLSH C3C3F263CD0059D3E56DC3FEBA065EF94E1E2B26E2163FE714304F897A684530D1B86A
Reporter Marco_Ramilli
Tags:autoexec base64 hex macros open_xml

Intelligence

File Origin
# of uploads :
1
# of downloads :
79
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Doc.Malware.Generic-7561114-0
Create hunting rule

SecuriteInfo.com.VBS.Obfus-67.UNOFFICIAL
Create hunting rule

Doc.Dropper.Emotet-7560994-0
Create hunting rule

TwinWave.EvilDoc.Emotet.ProcessCreateLoopers.20200123.UNOFFICIAL
Create hunting rule

TwinWave.EvilDoc.SongsInThewdKeyOfEmotet.20200124.UNOFFICIAL
Create hunting rule

TwinWave.EvilDoc.SongsInThewdKeyOfEmotetM2.20200130.UNOFFICIAL
Create hunting rule

Doc.Downloader.Emotet-7566357-0
Create hunting rule

Gathering data
Threat name:
Document-Word.Trojan.Snh
Create hunting rule
Status:
Malicious
First seen:
2020-02-29 22:20:29 UTC
AV detection:
13 of 31 (41.94%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

unknown bee3ef295e3b467cfac5aab779cf9018b64872f0761961af673b66fa6137f149

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/295252/
  
Delivery method
Distributed via web download

Comments