MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cdd893b24d5b2dd1fbeef6a31123b5f02c945b90f8aa7aafec171d73df9eebc8. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	cdd893b24d5b2dd1fbeef6a31123b5f02c945b90f8aa7aafec171d73df9eebc8
SHA3-384 hash:	1e0248cfe179897430965c1998ba807eebfa658817bce9a4d2442db7056b106a682a632f9cca1a76ecd822883e7ad644
SHA1 hash:	65080f029ea651d17ef9e76c49c4b6d2bb08e6ad
MD5 hash:	9df73c0b854e05d8357c71ee6e0e4f5e
humanhash:	thirteen-earth-white-winter
File name:	1_202306482273259151.pdf
Download:	download sample
Signature	Gozi Alert Create hunting rule
File size:	48'083 bytes
First seen:	2023-06-21 08:30:38 UTC
Last seen:	2023-06-21 09:02:31 UTC
File type:	pdf
MIME type:	application/pdf
ssdeep	768:fpf138yi6yqF0eBiCfR/SeUruiGM6WRpGMkW7SGBsOh3NTkixbUwqt+q67mhSdVV:fpf1MAyfeBiC1UrKMhRpwWnBh3NkiRUW
TLSH	T11523D07AB649181CF88EC716D23E3B8C29ED722349CD2446905E6B4249C1C19FA9F6C2
Reporter	JAMESWT_WT
Tags:	agenziaentrate balkun-com Gozi ITA pdf Ursnif

Intelligence

---

File Origin

# of uploads :

3

# of downloads :

445

Origin country :

IT

Vendor Threat Intelligence

DocGuard Suspicious

Result

Verdict:

Suspicious

File Type:

PDF File

Link:

https://app.docguard.net/cdd893b24d5b2dd1fbeef6a31123b5f02c945b90f8aa7aafec171d73df9eebc8/results/dashboard

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/6492b548b453925d407301c3/reports/8b66c851-d309-4616-869d-06492cc2efc3/overview

Hybrid Analysis Pdf/malicious_confidence_60%

Verdict:

Malicious

Labled as:

Pdf/malicious_confidence_60%

Link:

https://www.hybrid-analysis.com/sample/cdd893b24d5b2dd1fbeef6a31123b5f02c945b90f8aa7aafec171d73df9eebc8

inlyse Malware.AI Benign

Label:

Benign

Suspicious Score:

1.6/10

Score Malicious:

16%

Score Benign:

84%

Link:

https://www.malware.ai/gui/files/?id=6d30f10f-6a74-4f57-80a3-0ad4790b435e

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1258878

Signature

Multi AV Scanner detection for domain / URL

Behaviour

Behavior Graph:

Download SVG

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/cdd893b24d5b2dd1fbeef6a31123b5f02c945b90f8aa7aafec171d73df9eebc8/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=zxmjhmsnlmw5d67o62rrci5v6awjiw4q7cvhvl7mc4oxhx465pea._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.10

Link:

https://yomi.yoroi.company/submissions/cdd893b24d5b2dd1fbeef6a31123b5f02c945b90f8aa7aafec171d73df9eebc8