MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d0661a2e2cc0d19746c683584b35222370741715d76a12f4aebffdecaa7eb1bb. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: d0661a2e2cc0d19746c683584b35222370741715d76a12f4aebffdecaa7eb1bb
SHA3-384 hash: 81197863176e5b33a7d7ab916285c3f733deb0592a5032347794ba395463f8368ad40e7fabeaef335fdaacddaf96a789
SHA1 hash: 930e560abfc94adb1d62aa1fd639f341446a0623
MD5 hash: 26209fa6b84ea1cc68457d7a73527782
humanhash: cola-ceiling-high-thirteen
File name:ACCOUNT098000.IMG
Download: download sample
File size:812'645 bytes
First seen:2020-08-14 11:19:29 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 24576:vuJaKlJmHxEZYlA0ivf1eei14hcAsyFFr:vuJQHxJZiF/G4hcAswr
TLSH 800533C765400392271A72DE4C127B94E5BAB0C88D9E6FD22EE3F27C95CA1E48EF5D14
Reporter abuse_ch
Tags:img


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: wanriton.com
Sending IP: 45.137.22.52
From: Roy@wanriton.com
Subject: PO-098000
Attachment: ACCOUNT098000.IMG (contains "ACCOUNT#098000.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
63
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.DownLoader34.22910.26308.2330.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/d0661a2e2cc0d19746c683584b35222370741715d76a12f4aebffdecaa7eb1bb/
Threat name:
ByteCode-MSIL.Trojan.Basic
Create hunting rule
Status:
Suspicious
First seen:
2020-08-14 11:21:09 UTC
AV detection:
7 of 48 (14.58%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=2btbulrmydizorwgqnmewnjcenyhifyv25vbf5fox766zkt6wg5q._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/d0661a2e2cc0d19746c683584b35222370741715d76a12f4aebffdecaa7eb1bb

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

zip d0661a2e2cc0d19746c683584b35222370741715d76a12f4aebffdecaa7eb1bb

(this sample)

Executable exe dd900ac5b1cf790395caf7e5f5a773b0abae32e9e9314b5cb943b261e18e2b92

  
Dropping
MD5 1e4cd2aa2fc3e497c61cdf3622872de0
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 dd900ac5b1cf790395caf7e5f5a773b0abae32e9e9314b5cb943b261e18e2b92

Comments