MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d35bd65285db15a87a640d8ee8026193ae929d5f99aa8f50f15d646d23ce697a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: d35bd65285db15a87a640d8ee8026193ae929d5f99aa8f50f15d646d23ce697a
SHA3-384 hash: 4d42e195b05564899fcfed6753ab6f798ee925744028f30cac9d951e123f27ac18991b2e7468850f77fabdd0fb09f830
SHA1 hash: 00ec18f664f5e9a5bee0e99c2e160ab3d6c7c788
MD5 hash: 2debd756a1ce8fe31e7f59031056d2a4
humanhash: violet-maryland-batman-hawaii
File name:PKO-65213.iso
Download: download sample
File size:335'872 bytes
First seen:2020-10-08 12:42:02 UTC
Last seen:Never
File type: iso
MIME type:application/x-iso9660-image
ssdeep 1536:M1KdmGNgmj97RtAU+TekEttSaMgbRSsGRTKdZOlJdNtPo55rKrFUcDOC53bzf01E:t0Gvj97RtAU+TFrgFdZOHdkIFNME
TLSH B6645F03A92CA4B2EF39A33D40118CC591F65DAC05D8B11A57B8BD3DCA3D5215D2FEAE
Reporter abuse_ch
Tags:geo iso POL


Avatar
abuse_ch
Malspam distributing unidentified malware:

From: "PKO Bank Polski S.A." <accounting@wayfinderpm.com>
Subject: Powiadomienie o płatności przychodzącej
Attachment: PKO-65213.iso (contains "PKO-65213.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
94
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/d35bd65285db15a87a640d8ee8026193ae929d5f99aa8f50f15d646d23ce697a/
Threat name:
Win32.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2020-10-08 12:43:07 UTC
AV detection:
3 of 48 (6.25%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=2nn5muuf3mk2q6tebwhoqatbsoxjfhk7tgvi6uhrlvsg2i6onf5a._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/d35bd65285db15a87a640d8ee8026193ae929d5f99aa8f50f15d646d23ce697a

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

iso d35bd65285db15a87a640d8ee8026193ae929d5f99aa8f50f15d646d23ce697a

(this sample)

Executable exe 86ea1ec9ed1a1ec9fb2200d2a2f5c81ea06a55ddb4621fc74a627f5eee480d5a

  
Dropping
MD5 0b6a7baed4c36f38682523c9401a0243
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 86ea1ec9ed1a1ec9fb2200d2a2f5c81ea06a55ddb4621fc74a627f5eee480d5a

Comments