MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 dfdff5e955c6ef46ee41bdd90114d4841bd47ee38702be28a63089a90cb2bad4. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: dfdff5e955c6ef46ee41bdd90114d4841bd47ee38702be28a63089a90cb2bad4
SHA3-384 hash: f24079af174890cb8c64e47ccee74ebc8087ed1a59e725b885e968d399706b574a7f5b75f910f02d3e960838ca7ffb37
SHA1 hash: 327cc56f3cc7b5444c1ac57495a7533abfa58157
MD5 hash: 4dfd7508b1c0a770d8e1f365ab7b8768
humanhash: chicken-missouri-failed-iowa
File name:PREY order [120080] - SEM.zip
Download: download sample
File size:86'254 bytes
First seen:2020-06-29 10:43:33 UTC
Last seen:2020-06-30 05:48:40 UTC
File type: zip
MIME type:application/zip
ssdeep 1536:/tQ9Gx+fOQJNWrJVSiL8SHdKL+iH6rQVkcKwz1jXsKKnM07kSN0/XPZGHJ8h:VCs4OQJAlVSQ84YbVkBwBxKn7kd/Qs
TLSH 208312F6871A0D93B9B32BE7281BDC85EE91C43213056BC53176E29B6DFA1341D8A473
Reporter cocaman
Tags:zip


Avatar
cocaman
Malicious email
From: "RUD. PREY GMBH & Co. KG"<noreply@esreamwat.site>
Received: from esreamwat.site (esreamwat.site [185.31.160.17])
Date: Mon, 29 Jun 2020 10:21:17 -0000
Subject: RE: PREY order [120080] - SEM
Attachment: PREY order [120080] - SEM.zip

Intelligence

File Origin
# of uploads :
2
# of downloads :
63
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Generic.mg.52fd7242f9534766.21325.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/dfdff5e955c6ef46ee41bdd90114d4841bd47ee38702be28a63089a90cb2bad4/
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-06-29 10:45:05 UTC
File Type:
Binary (Archive)
Extracted files:
8
AV detection:
18 of 31 (58.06%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=37p7l2kvy3xun3sbxxmqcfguqqn5i7xdq4bl4kfggce2sdfsxlka._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

zip dfdff5e955c6ef46ee41bdd90114d4841bd47ee38702be28a63089a90cb2bad4

(this sample)

Executable exe 3368dc50181b9b117285127693f958ef48a0fd70fd6606131c4db6a4d0d55eb7

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 3368dc50181b9b117285127693f958ef48a0fd70fd6606131c4db6a4d0d55eb7

Comments