MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 dd6be4329170016cbbc9eb8e8039b2ec1de9f445ff00a5986d5a64e276be6985. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: dd6be4329170016cbbc9eb8e8039b2ec1de9f445ff00a5986d5a64e276be6985
SHA3-384 hash: 8508f80a7eaa8f11dc8533e7fda7f20ec0f6ac1f509dc16cfb6fca6f9f5645b182591cbc523f0666dd961224c666063f
SHA1 hash: 255649804fefe0f9ee59395be33e6d482bb51927
MD5 hash: 7d41d450655dcda5a2a5445fbcc14c16
humanhash: vermont-virginia-may-muppet
File name:New Order.zip
Download: download sample
File size:323'554 bytes
First seen:2020-08-10 13:06:33 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:jsVEXWXL4ysoA9aKdH6A4L+cRZYJgZNkhvPuKAN4TQLBPus4LIb+y9kDZ:jsVEmbsaKdr4LP8g4hnNAN4McFLIx+V
TLSH 5A6423D1CD4DF8A7E14150BDDA33AE0C3EDA930815A3ECA153EECA3B8DA5BD1A5505B0
Reporter abuse_ch
Tags:zip


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: imsantv71.netvigator.com
Sending IP: 210.87.250.171
From: MAX & MUK SILVER CO., LTD <emeraldgem@biznetvigator.com>
Subject: New Order
Attachment: New Order.zip (contains "New Order.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
61
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.20634.ZipHeur.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.22623.ZipHeur.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/dd6be4329170016cbbc9eb8e8039b2ec1de9f445ff00a5986d5a64e276be6985/
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-08-10 13:08:11 UTC
AV detection:
6 of 48 (12.50%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=3vv6imuroaawzo6j5ohiaons5qo6t5cf74aklgdnljsoe5v6ngcq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/dd6be4329170016cbbc9eb8e8039b2ec1de9f445ff00a5986d5a64e276be6985

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

zip dd6be4329170016cbbc9eb8e8039b2ec1de9f445ff00a5986d5a64e276be6985

(this sample)

Executable exe ff72da13e03a2e2b2019a9899a6d036a054fcac79a563281bd1aeb34a69f3a38

  
Dropping
MD5 270f1e82ce6d22581c277bf2b3d918ee
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 ff72da13e03a2e2b2019a9899a6d036a054fcac79a563281bd1aeb34a69f3a38

Comments