MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 df537023d6a69e5342c3c8f471031c9ca241305646a594782a75ff13d4a91c95. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: df537023d6a69e5342c3c8f471031c9ca241305646a594782a75ff13d4a91c95
SHA3-384 hash: 6cba4943646880b7f983211e3a00bde4906b22ee44b8dc69cd9625361fe5df7b2b8f4e70b1a9ff764fb7041deb4c659a
SHA1 hash: a0dc9809f28c5ecb452115fbf4b916391bae02aa
MD5 hash: 54f0a714116749a7d8afdac980f3c9cb
humanhash: illinois-freddie-mike-five
File name:df537023d6a69e5342c3c8f471031c9ca241305646a594782a75ff13d4a91c95
Download: download sample
File size:127'020 bytes
First seen:2020-03-29 08:16:34 UTC
Last seen:Never
File type:unknown
MIME type:application/octet-stream
ssdeep 3072:3VAHQqprDuG8xheY3P9jhytOxPaf5vEPWLNyEyuKmQSpeBU/mDr:FAHb5j6heA9ly8xPalLcEZdpeWOr
TLSH 5BC3F267CC0059C3E56DC3FEBA061EF94E1E2B26E2163FE714314F897A684530D5B86A
Reporter Marco_Ramilli
Tags:autoexec base64 hex macros open_xml

Intelligence

File Origin
# of uploads :
1
# of downloads :
80
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Doc.Malware.Generic-7561114-0
Create hunting rule

SecuriteInfo.com.VBS.Obfus-67.UNOFFICIAL
Create hunting rule

Doc.Dropper.Emotet-7560994-0
Create hunting rule

TwinWave.EvilDoc.Emotet.ProcessCreateLoopers.20200123.UNOFFICIAL
Create hunting rule

TwinWave.EvilDoc.SongsInThewdKeyOfEmotet.20200124.UNOFFICIAL
Create hunting rule

TwinWave.EvilDoc.SongsInThewdKeyOfEmotetM2.20200130.UNOFFICIAL
Create hunting rule

Doc.Downloader.Emotet-7566357-0
Create hunting rule

Gathering data
Threat name:
Document-Word.Trojan.Snh
Create hunting rule
Status:
Malicious
First seen:
2020-03-16 14:41:05 UTC
AV detection:
13 of 31 (41.94%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

unknown df537023d6a69e5342c3c8f471031c9ca241305646a594782a75ff13d4a91c95

(this sample)

  
URLhaus
https://urlhaus.abuse.ch/url/296294/
  
Delivery method
Distributed via web download

Comments