MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cec5ba55365f5be7e9f9b4d6ad7678b72b5b49c565484b450453f7e206c62cd4. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: cec5ba55365f5be7e9f9b4d6ad7678b72b5b49c565484b450453f7e206c62cd4
SHA3-384 hash: 54d9bdc8117ea7cdf1fe5dd60b08483d73afa9413b953b9466ea60aa3686669fd8e9de0db9efc61eec863a12ccab6c28
SHA1 hash: dd394d9c929d293d4e5d5160a232cf9fadc7dd06
MD5 hash: 984e34f39b7cc232db735290feaf3033
humanhash: delaware-iowa-three-lion
File name:New Purchase Order 0102243.gz
Download: download sample
File size:527'255 bytes
First seen:2020-10-14 15:54:45 UTC
Last seen:Never
File type: gz
MIME type:application/gzip
ssdeep 12288:f3YAsB+9/qbZHg54PG2Pl7wI9JH15nPrOEHbOXuoMdf:wAsBA/iH3p9JbPqBw
TLSH 34B423027AB2B787D864A9E31A55BD8027F4D4B5A70ACB6818C08109DDFC07E72DEDD7
Reporter abuse_ch
Tags:gz


Avatar
abuse_ch
Malspam distributing unidentified malware:

From: "Mathew" <export@burmatex.co.uk>
Subject: NEW ORDER
Attachment: New Purchase Order 0102243.gz (contains "New Purchase Order 0102243.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
72
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.MSIL.Kryptik.VFR-1.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/cec5ba55365f5be7e9f9b4d6ad7678b72b5b49c565484b450453f7e206c62cd4/
Threat name:
ByteCode-MSIL.Trojan.CryptInject
Create hunting rule
Status:
Malicious
First seen:
2020-10-14 15:56:07 UTC
AV detection:
16 of 48 (33.33%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.69
Link:
https://yomi.yoroi.company/submissions/cec5ba55365f5be7e9f9b4d6ad7678b72b5b49c565484b450453f7e206c62cd4

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

gz cec5ba55365f5be7e9f9b4d6ad7678b72b5b49c565484b450453f7e206c62cd4

(this sample)

Executable exe 6f28f66d9d9638be7828926fac666ff4724027366a31ca454ed308d7f4a8de34

  
Dropping
MD5 c071a92673c6df946b68acade96b3b43
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 6f28f66d9d9638be7828926fac666ff4724027366a31ca454ed308d7f4a8de34

Comments