MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 db2f6797ce2888af8b7761f4c081f7cfaf7cc3ecdc729056aa6e151f7bcae52c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 4
| SHA256 hash: | db2f6797ce2888af8b7761f4c081f7cfaf7cc3ecdc729056aa6e151f7bcae52c |
|---|---|
| SHA3-384 hash: | 41407f17a1c325fc9e543c10bc816df34f6910a982330383c6a41d5824d8f53f0457d3c09e352728407f18a1d6c173da |
| SHA1 hash: | 779d0b33c1c8ecf0224519f41f18048dea664040 |
| MD5 hash: | 17b50047375cdfba0bf56fbe2c649160 |
| humanhash: | sierra-bacon-mountain-queen |
| File name: | Order PONSB 04042021.pdf939MB.rar |
| Download: | download sample |
| File size: | 813'837 bytes |
| First seen: | 2021-04-04 13:46:55 UTC |
| Last seen: | 2021-04-04 15:31:02 UTC |
| File type: | rar |
| MIME type: | application/x-rar |
| ssdeep | 24576:r5ovbcmPSQuzjcDP9R4Kh3dw6XAdQQfbV:rK+cTz/xdwMTiV |
| TLSH | C905235EA7753C3CEFFB27443B82C66F13722865D77CE2A6106CE530289E861605E92D |
| Reporter |  abuse_ch |
| Tags: | rar |
abuse_ch
Malspam distributing unidentified malware:HELO: naseem-baghdad.com
Sending IP: 31.210.20.235
From: info@naseem-baghdad.com
Reply-To: info@naseern-baghdad.com
Subject: Re: Order PO/NSB 04/04/2021
Attachment: Order PONSB 04042021.pdf939MB.rar (contains "Order PONSB 04042021.pdf(939MB).exe")
Intelligence
File Origin
# of uploads :
2
# of downloads :
215
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Gathering data
Threat name:
Win32.Trojan.Wacatac
Status:
Malicious
First seen:
2021-04-04 13:43:37 UTC
File Type:
Binary (Archive)
Extracted files:
48
AV detection:
16 of 48 (33.33%)
Threat level:
5/5
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
rar db2f6797ce2888af8b7761f4c081f7cfaf7cc3ecdc729056aa6e151f7bcae52c
(this sample)
exe Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.