MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d7dd043ab28e03ce33042acf1261900c7c06bcecb56c953774e25681ecf2bb05. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: d7dd043ab28e03ce33042acf1261900c7c06bcecb56c953774e25681ecf2bb05
SHA3-384 hash: 4f9c32b6a99d7956b68ec352bdecfb8c04da9ae4d04a0741dd4ac5b2eef8d587a9bc5ad67a666c899d8b8bdcbd47610f
SHA1 hash: 7b0c2412faeedc372b174007a25704ff0452ceb2
MD5 hash: 3966fd53e7e0c1da3260f0bdf8abc6e4
humanhash: sierra-eleven-fruit-triple
File name:Mediform S.A Order Specification Requirement.rar
Download: download sample
File size:488'873 bytes
First seen:2020-10-14 15:11:35 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 12288:b9PSLj4gfGE/v7NeOrshPMNC3hCkn6EodlJqM2O8B:1SLjj/JeOrsh4wn6EodYB
TLSH 5DA423B55BEBD6ECF7227C02A52E6A05C4E16C16AD412CCAD01D91DCD8098B3B7583BF
Reporter abuse_ch
Tags:geo GRC rar


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: rdns0.desar.xyz
Sending IP: 67.205.150.177
From: Mediform S.A Ελλάδα<mediform.s.a@hotmail.com>
Subject: Re: Απάντηση: Request for Quotation (Ημερομηνία έναρξης προσφοράς: 26 - 10 - 2020)
Attachment: Mediform S.A Order Specification Requirement.rar (contains "Mediform S.A Order Specification Requirement.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
63
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/d7dd043ab28e03ce33042acf1261900c7c06bcecb56c953774e25681ecf2bb05/
Threat name:
Win32.Trojan.Taskun
Create hunting rule
Status:
Malicious
First seen:
2020-10-14 01:01:27 UTC
AV detection:
19 of 48 (39.58%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=27oqiovsryb44myeflhreymqbr6anphmwvwjkn3u4jlid3hsxmcq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/d7dd043ab28e03ce33042acf1261900c7c06bcecb56c953774e25681ecf2bb05

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

rar d7dd043ab28e03ce33042acf1261900c7c06bcecb56c953774e25681ecf2bb05

(this sample)

Executable exe 20170bf3dca7d3440fa50382a81ca7802fa021b68b8830f286fe02113d24d850

  
Dropping
MD5 c2d4404796ec4bbac7ab2b75b3e21733
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 20170bf3dca7d3440fa50382a81ca7802fa021b68b8830f286fe02113d24d850

Comments