MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e46526b1f4166e114af5dde9ab371a3928ee842121231f66194d02d02f0c6b54. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: e46526b1f4166e114af5dde9ab371a3928ee842121231f66194d02d02f0c6b54
SHA3-384 hash: 0bc406efbe7027fe30a3dedd27a2ab79d308329db821c806a8c68dcf7f99fb95f4de5ba28707317d50867a4e188b470a
SHA1 hash: 779bb93f6875d9941ac6bfd59ae7a28f915a5ff8
MD5 hash: 308b03bd1669c3b7e07089a412550607
humanhash: minnesota-don-blue-nevada
File name:FACTURACIÓN SEPTIEMBRE 2020.zip
Download: download sample
File size:548'036 bytes
First seen:2020-10-14 15:16:56 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:82rGMckCHK0jMzzyiEU7VtSP2B/Rr4SAAVaDTftE/ttO/:fGl4CiEGV8uhRXQPft9/
TLSH DBC423E46E80C70DF27345378BDD75D9041216DAD93E9B24BB94AA20A94BC347ECE7C8
Reporter abuse_ch
Tags:ESP geo zip


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: vps-1047648-1326.cp.noc.softec-internet.com
Sending IP: 188.95.114.231
From: María del Carmen Gallardo Alonso <maria.gallardo@s1ngular.es>
Subject: FACTURACIÓN SEPTIEMBRE 2020
Attachment: FACTURACIÓN SEPTIEMBRE 2020.zip (contains "YIVuEyGYGtUmkPl.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
63
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.MSIL.Kryptik.VFR-1.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/e46526b1f4166e114af5dde9ab371a3928ee842121231f66194d02d02f0c6b54/
Threat name:
ByteCode-MSIL.Trojan.CryptInject
Create hunting rule
Status:
Malicious
First seen:
2020-10-14 13:40:55 UTC
AV detection:
16 of 48 (33.33%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=4rssnmpuczxbcsxv3xu2wny2heuo5bbbeerr6zqzjubnalymnnka._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Kryptik
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/e46526b1f4166e114af5dde9ab371a3928ee842121231f66194d02d02f0c6b54

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

zip e46526b1f4166e114af5dde9ab371a3928ee842121231f66194d02d02f0c6b54

(this sample)

Executable exe 489daeea6bc3472ed4d59ecd6127bf14ed8c1c0ed7ae00fafaa743dbccc6ce30

  
Dropping
MD5 ee94164b5c7ff1bb81f3d3d6189ae5f3
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 489daeea6bc3472ed4d59ecd6127bf14ed8c1c0ed7ae00fafaa743dbccc6ce30

Comments