MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c40e12c88194251301a533dca122b6c7dc573a540e8d4126125384d1fbebba32. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: c40e12c88194251301a533dca122b6c7dc573a540e8d4126125384d1fbebba32
SHA3-384 hash: 0c376f759490ac3961772e221f678ff101ee2f3f3d443aaf82ac8345daa4b68c1ca12240c694ee771bb782dab01ec40b
SHA1 hash: 38b6d8a2d00349d8b1cd6c38a03905cde0c6e420
MD5 hash: 0b6cb99438c60c3053e42d42d5927751
humanhash: diet-river-alabama-mirror
File name:PO-34482.zip
Download: download sample
File size:7'508 bytes
First seen:2022-04-16 06:36:23 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 96:wuFUW2+X3diucf9Ji+A2mN3IKdt+VTZO9oXiWffCDW2QYdP8cAXZgdwvCGKj04i3:HFGrFmJKVEGXitdkcAamCGMHe
TLSH T1F0F19E4EA0C1054E93E3C83F7592124E2606453E89B58A3DE608F545BBF0B15EC8A98F
TrID 80.0% (.ZIP) ZIP compressed archive (4000/1)
20.0% (.PG/BIN) PrintFox/Pagefox bitmap (640x800) (1000/1)
Reporter cocaman
Tags:RFQ zip


Avatar
cocaman
Malicious email (T1566.001)
From: "Paijit Dhanmanudham <jibran@raqam.pk>" (likely spoofed)
Received: "from raqam.pk (unknown [103.171.0.38]) "
Date: "14 Apr 2022 08:00:15 -0700"
Subject: "Order Confirmation : Rfq: //TOP URGENT// - PO-34482 for 34,948.64 USD"
Attachment: "PO-34482.zip"

Intelligence

File Origin
# of uploads :
1
# of downloads :
401
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Foxhole.Zip_fs2268.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.JS.Obfus-2146.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.27269.JsHeur.UNOFFICIAL
Create hunting rule

Verdict:
Malicious
Threat level:
  10/10
Confidence:
100%
Link:
https://www.filescan.io/uploads/625a640effe27d5119e3bcd9/reports/3148f518-5fd2-44d0-9b46-95302a5d01a4/overview
Result
Verdict:
MALICIOUS
Link:
https://labs.inquest.net/dfi/sha256/c40e12c88194251301a533dca122b6c7dc573a540e8d4126125384d1fbebba32
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/c40e12c88194251301a533dca122b6c7dc573a540e8d4126125384d1fbebba32/
Threat name:
Document-HTML.Trojan.Heuristic
Create hunting rule
Status:
Malicious
First seen:
2022-04-14 17:07:15 UTC
File Type:
Binary (Archive)
Extracted files:
21
AV detection:
4 of 26 (15.38%)
Threat level:
  2/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=yqhbfsebsqsrganfgpokcivwy7ofoosub2gucjqskocnd67lxiza._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/c40e12c88194251301a533dca122b6c7dc573a540e8d4126125384d1fbebba32

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

zip c40e12c88194251301a533dca122b6c7dc573a540e8d4126125384d1fbebba32

(this sample)

unknown 871d04499245db9419997fee7dee54ba8b001efebebffe9eb6c31bffa68cdd02

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 871d04499245db9419997fee7dee54ba8b001efebebffe9eb6c31bffa68cdd02

Comments