MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d32803bad382b1d0a1b16bfe7c7865b6a0cdb4daefbf36b78bc9884e6eb32400. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Threat unknown

Vendor detections: 2

Intelligence 2 IOCs YARA File information Comments 1

SHA256 hash:	d32803bad382b1d0a1b16bfe7c7865b6a0cdb4daefbf36b78bc9884e6eb32400
SHA3-384 hash:	c7813a9579e3ef302a03e9cac34ccec0bf3c2376dccbfd7963d6105435859cce40882adf5adc87fa56b32720e3a80685
SHA1 hash:	0f870a210b4574aba015f3988451265c5e3f794a
MD5 hash:	db6ddb7a89bebd588fe91d06e9aa9e43
humanhash:	king-gee-spring-louisiana
File name:	9880-0806.zip
Download:	download sample
File size:	15'985 bytes
First seen:	2022-06-08 08:16:04 UTC
Last seen:	Never
File type:	zip
MIME type:	application/zip
ssdeep	384:04dJfiQZKM1WGK0OBsEaMf87A1XdlZcuKt7gyQ2hXgjL:nqFMe0OBRUqnZItejL
TLSH	T1EC72C0848131445AEF1F15F8E5F4660DC35AC2EB0429B46B0A6537624BCC529DB3B32B
TrID	80.0% (.ZIP) ZIP compressed archive (4000/1) 20.0% (.PG/BIN) PrintFox/Pagefox bitmap (640x800) (1000/1)
Reporter	cocaman
Tags:	zip

cocaman

Malicious email (T1566.001)
From: ""Marzia" <nfe.webler@coomisa.com.br>" (likely spoofed)
Received: "from hm1831-4.locaweb.com.br (hm1831-4.locaweb.com.br [189.126.112.24]) "
Date: "Wed, 08 Jun 2022 05:14:55 -0300"
Subject: "Una vittoria di Zoe e non solo"
Attachment: "9880-0806.zip"

Intelligence

File Origin

# of uploads :

# of downloads :

226

Origin country :

n/a

Vendor Threat Intelligence

Gathering data

Result

Verdict:

UNKNOWN

Link:

https://labs.inquest.net/dfi/sha256/d32803bad382b1d0a1b16bfe7c7865b6a0cdb4daefbf36b78bc9884e6eb32400

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/d32803bad382b1d0a1b16bfe7c7865b6a0cdb4daefbf36b78bc9884e6eb32400/

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=2muahowtqky5binrnp7hy6dfw2qm3ng2567tnn4lzgee43vteqaa._file

Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

zip d32803bad382b1d0a1b16bfe7c7865b6a0cdb4daefbf36b78bc9884e6eb32400

(this sample)

SilentBuilder

xls f8eaa9c55d6901d69a13b07cbaee13695f6bb40e418c44749491271552306a4d

Delivery method

Distributed via e-mail attachment

Dropping

SHA256 f8eaa9c55d6901d69a13b07cbaee13695f6bb40e418c44749491271552306a4d

Dropping

MD5 2a59708764d5dc39e6d9747b32c66cb1

Comments

Login required

You need to login to in order to write a comment. Login with your abuse.ch account.

Corsin Camichel commented on 2022-06-12 18:52:07 UTC

Salve,

Siccome la comunicazione precedente con il file allegato era molto pesante.
Sono quindi a riscrivervi la comunicazione.

9880-0806.zip

ZIP pass 813

best regards

Marzia