MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 c6700763a31b59e06adb98538fe4d5a0f9a5d93dfdc43d060f4b5d307ad65e84. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 4
| SHA256 hash: | c6700763a31b59e06adb98538fe4d5a0f9a5d93dfdc43d060f4b5d307ad65e84 |
|---|---|
| SHA3-384 hash: | 3e30dffb9cecda3aa403b5043ef4b088c44fd181c427c921c1ffcf85507ba6a7e3eddbdb47cccab320006a5de376da08 |
| SHA1 hash: | 028fc6c9b35af769d9842d0ef49cf306cddd7eb8 |
| MD5 hash: | 94d1c485cf6589ae417e5c35389cb139 |
| humanhash: | stairway-indigo-robert-hotel |
| File name: | AD.FACTURA.vMFFJBuO3s.zip |
| Download: | download sample |
| File size: | 23'438 bytes |
| First seen: | 2024-07-05 07:04:07 UTC |
| Last seen: | 2024-07-05 07:04:58 UTC |
| File type: | zip |
| MIME type: | application/zip |
| ssdeep | 384:YjY3l1SeUnaprtKO1I13mwrNOfuPuJCISPuiWI4SUwww9AvJnt1fCR8:Yjgl9UMKO1VwfPuJCvmicI9AvNtdCR8 |
| TLSH | T11BB2D0561D537A4DE6821F3D07F7DCA60322C7B5B6EC944741B2487E6AF4C182CC9D2A |
| TrID | 80.0% (.ZIP) ZIP compressed archive (4000/1) 20.0% (.PG/BIN) PrintFox/Pagefox bitmap (640x800) (1000/1) |
| Reporter |  cocaman |
| Tags: | zip |
cocaman
Malicious email (T1566.001)From: "fct.556@finanza1.servesarcasm.com" (likely spoofed)
Received: "from finanza1.servesarcasm.com (finanza1.servesarcasm.com [57.129.45.82]) "
Date: "Thu, 4 Jul 2024 17:15:21 -0500"
Subject: "Factura Se adjunta el archivo PDF CFDI219 "
Attachment: "AD.FACTURA.UHETq3j9Nl.zip"
Intelligence
File Origin
# of uploads :
2
# of downloads :
184
Origin country :
CHFile Archive Information
This file archive contains 1 file(s), sorted by their relevance:
| File name: | Ad=Factura.pdf |
|---|---|
| File size: | 26'111 bytes |
| SHA256 hash: | b8ed2cee54871fe2541e094ccf34465fcaeecbe4a9cb708da05d01cb9f7a1b73 |
| MD5 hash: | 4e73ccde2aebd3c0cabfef85df255b35 |
| MIME type: | application/pdf |
Vendor Threat Intelligence
Verdict:
Clean
Score:
89.3%
Link:
Tags:
n/a
Verdict:
No Threat
Threat level:
10/10
Confidence:
100%
Tags:
action
Detection(s):
Suspicious file
Result
Malware family:
n/a
Score:
1/10
Tags:
n/a
Behaviour
Checks processor information in registry
Modifies Internet Explorer settings
Suspicious behavior: EnumeratesProcesses
Suspicious behavior: GetForegroundWindowSpam
Suspicious use of SetWindowsHookEx
Suspicious use of WriteProcessMemory
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
zip c6700763a31b59e06adb98538fe4d5a0f9a5d93dfdc43d060f4b5d307ad65e84
(this sample)
Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.