MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c3148c6c4b0ecce9c7d07ba57dea96e35acf5f2ef47396c48339bb9a3a07e390. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


BumbleBee


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments 1
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: c3148c6c4b0ecce9c7d07ba57dea96e35acf5f2ef47396c48339bb9a3a07e390
SHA3-384 hash: af0a2f70a286c8617ea50a289e04999a6bf449bb1678cb51ee613bcdd425eea070a959bec6ba6ee1e5c6939dbea6ee56
SHA1 hash: 759034746e83882b614b7d47934db30fae9d6d96
MD5 hash: b64a0fbbfad013c85d14579b3fe091a8
humanhash: grey-comet-delaware-stream
File name:Report_032141_Invoice_PDF.iso
Download: download sample
Signature BumbleBee
Create hunting rule
File size:5'046'272 bytes
First seen:2022-04-21 14:55:23 UTC
Last seen:2022-04-22 10:37:53 UTC
File type: iso
MIME type:application/octet-stream
ssdeep 49152:+wJ6bUFSuLjWTrbfQlrd088iG1oO9BDA80xZ8MT+:+wCPc088iG1oO9BDA80xZ8MT+
TLSH T16B368DB698CCB265F844E5FD9B37C974409BBD08B9CFC4078264262B588513AEB5F7C8
TrID 99.6% (.NULL) null bytes (2048000/1)
0.2% (.ATN) Photoshop Action (5007/6/1)
0.0% (.BIN/MACBIN) MacBinary 1 (1033/5)
0.0% (.ABR) Adobe PhotoShop Brush (1002/3)
0.0% (.SMT) Memo File Apollo Database Engine (88/84)
Reporter k3dg3___
Tags:BUMBLEBEE iso

Intelligence

File Origin
# of uploads :
2
# of downloads :
213
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Gen.Variant.Lazy.171724.11207.7732.UNOFFICIAL
Create hunting rule

Verdict:
No Threat
Threat level:
  2/10
Confidence:
100%
Link:
https://www.filescan.io/uploads/62617085eab80a7a6c54dc26/reports/84f08f5e-59fb-46a2-a0ae-7581c4d84f9f/overview
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/c3148c6c4b0ecce9c7d07ba57dea96e35acf5f2ef47396c48339bb9a3a07e390/
Threat name:
Win32.Trojan.Khalesi
Create hunting rule
Status:
Malicious
First seen:
2022-04-21 14:56:15 UTC
File Type:
Binary (Archive)
Extracted files:
2
AV detection:
6 of 42 (14.29%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/c3148c6c4b0ecce9c7d07ba57dea96e35acf5f2ef47396c48339bb9a3a07e390

File information

The table below shows additional information about this malware sample such as delivery method and external references.

BumbleBee

iso c3148c6c4b0ecce9c7d07ba57dea96e35acf5f2ef47396c48339bb9a3a07e390

(this sample)

BumbleBee

Executable exe 3463f026ce1c325931e285b587b82f7f690db2e75929c7edd154df1e14f38c93

  
Dropping
SHA256 3463f026ce1c325931e285b587b82f7f690db2e75929c7edd154df1e14f38c93
  
Delivery method
Distributed via e-mail link
  
Dropping
MD5 4820f3c0c2b85d9e8ebb121fd35cb3bc

Comments


Avatar
Kelsey commented on 2022-04-21 14:57:37 UTC

dropped as attachment,not link