MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d2e2fccac0aae54501d1199ad4b2945dd416fb05bbe9acf0840091bb4603a38b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	d2e2fccac0aae54501d1199ad4b2945dd416fb05bbe9acf0840091bb4603a38b
SHA3-384 hash:	1332bb9ddcaa49f6ae6c93905761291c73a5ded4bc5ecec760f688ee6c3a74793f2c290a17d979982ea2062b52c0993d
SHA1 hash:	e253260ef0d8ff3155da7a3f1c9c029197d385b4
MD5 hash:	ae4a87c0c70220bac56d9f7ab1d5324a
humanhash:	social-yankee-delta-seventeen
File name:	ILQW2469_9164557.zip
Download:	download sample
Signature	IcedID Alert Create hunting rule
File size:	365'982 bytes
First seen:	2023-10-11 23:30:10 UTC
Last seen:	Never
File type:	zip
MIME type:	application/zip
Note:	This file is a password protected archive. The password is: W1289
ssdeep	6144:lF6Iq3dadNddibYpx2O013CBHvIBkl/dkVAlyqeuF9e5T2b+/UnR979KqlXjWHzi:lwdMN7ibk013CJvb9d1l/05T2C/UR973
TLSH	T17074237B870A0CEBF643E3B4926A346373F7571E52759CA09280FC4B6122D4DBE46A4D
TrID	80.0% (.ZIP) ZIP compressed archive (4000/1) 20.0% (.PG/BIN) PrintFox/Pagefox bitmap (640x800) (1000/1)
Reporter	JAMESWT_WT
Tags:	gestionhqse-com IcedID p-W1289 pw-W1289 zip

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

183

Origin country :

IT

File Archive Information

This file is a password protected archive. The password is: W1289

This file archive contains 2 file(s), sorted by their relevance:

Relevant files 2

File name:	F.A.Q[2023.10.11_08-07].txt
File size:	192 bytes
SHA256 hash:	4654b1042f90a2a6a480fdfaf7375a153af7e82b801930b4b5a97263704e95a2
MD5 hash:	99f87f04732ea7d9a3469b93dd6beec0
MIME type:	text/plain
Signature	IcedID

File name:	inquiry[2023.10.11_08-07].vbs
File size:	1'036'649 bytes
SHA256 hash:	b9fdea30fcf81e4ce2084f86cab813c5fa46a40d5a6b666a2c77e86fbe49a513
MD5 hash:	5a1dc1c02275de90b55b41e134f76895
MIME type:	text/plain
Signature	IcedID

Vendor Threat Intelligence

FileScan.io

Gathering data

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/d2e2fccac0aae54501d1199ad4b2945dd416fb05bbe9acf0840091bb4603a38b

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/d2e2fccac0aae54501d1199ad4b2945dd416fb05bbe9acf0840091bb4603a38b/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=2lrpzswavlsukaordgnnjmuulxkbn6yfxpu2z4eeaci3wrqduofq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.