🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cf2cbbaf628c5fd91424d79f51931c6721e9cf036404c0b8a75b697f1f9cdd64. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 8


Intelligence 8 IOCs YARA File information Comments

SHA256 hash: cf2cbbaf628c5fd91424d79f51931c6721e9cf036404c0b8a75b697f1f9cdd64
SHA3-384 hash: 8e9a7b02ac9628a8c7f4f401203ec06b724de8465483f35e2710a4766188a9feeb320528a3b027cbc5ef4907e1706703
SHA1 hash: 1ce3cccb8bd37db5f1a7115381c9e345f86863aa
MD5 hash: c8fef6aa70e440b6762dbc78bba8162b
humanhash: november-september-burger-spaghetti
File name:0008765445670000.pdf
Download: download sample
File size:870 bytes
First seen:2024-02-20 10:08:40 UTC
Last seen:Never
File type: pdf
MIME type:application/pdf
ssdeep 24:1KZl55CUsWVukrUROc9AvaRYTe0rTemHbfqXXyc2K0bFutT:obCWV5rHauzBbzczdtT
TLSH T1B511AF62F9A80C8CFD03CF8A248E3F49055DB1175BD938D101AC6B046559E2CE7869B5
Reporter Anonymous
Tags:pdf

Intelligence


File Origin
# of uploads :
1
# of downloads :
463
Origin country :
DE DE
Vendor Threat Intelligence
Label:
Benign
Suspicious Score:
2.9/10
Score Malicious:
3%
Score Benign:
7%
Result
Threat name:
n/a
Detection:
malicious
Classification:
n/a
Score:
48 / 100
Signature
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
behaviorgraph top1 signatures2 2 Behavior Graph ID: 1395166 Sample: 0008765445670000.pdf Startdate: 20/02/2024 Architecture: WINDOWS Score: 48 18 Multi AV Scanner detection for submitted file 2->18 7 Acrobat.exe 20 75 2->7         started        process3 process4 9 AcroCEF.exe 103 7->9         started        process5 11 AcroCEF.exe 4 9->11         started        dnsIp6 14 107.22.247.231, 443, 49715, 49716 AMAZON-AESUS United States 11->14 16 23.47.168.24, 443, 49717 AKAMAI-ASUS United States 11->16
Threat name:
Document-PDF.Trojan.Heuristic
Status:
Malicious
First seen:
2022-06-13 09:53:25 UTC
File Type:
Document
AV detection:
10 of 38 (26.32%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

pdf cf2cbbaf628c5fd91424d79f51931c6721e9cf036404c0b8a75b697f1f9cdd64

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments