MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e785dc7389084a775373d02a861bab1e75582570363cd6773ef2b986a0a1857a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


IcedID


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: e785dc7389084a775373d02a861bab1e75582570363cd6773ef2b986a0a1857a
SHA3-384 hash: 7c997b0c81c3ba62b13a2318c3d5733af34fd891996e01e6c82556a702e149698d3006dc98a20a1b0dba29ba1fbe7698
SHA1 hash: 6725c7f017af969fc7a449b1c2366ed7065fe126
MD5 hash: 30d9df210711d099e41e1374fb033eb5
humanhash: kilo-west-stairway-august
File name:StolenImages_Evidence_08-31-2022_15-36-01.zip
Download: download sample
Signature IcedID
Create hunting rule
File size:117'310 bytes
First seen:2022-08-31 15:39:50 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 3072:IZfd3pklOsQ8STUBasSX5y8/ELhKKiT4X6J7N5Lkw:yfd3pkxQ8ST/sqM8AhkF75Ll
TLSH T1F2B3024938A45608E59FB437CF1AAFC144598EB3CE6701EA68C43AF275D1FA17CA4393
TrID 80.0% (.ZIP) ZIP compressed archive (4000/1)
20.0% (.PG/BIN) PrintFox/Pagefox bitmap (640x800) (1000/1)
Reporter pr0xylife
Tags:IcedID zip

Intelligence

File Origin
# of uploads :
1
# of downloads :
217
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
TwinWave.EviLNK.ICEDYouLearn.20220815.UNOFFICIAL
Create hunting rule

Gathering data
Result
Verdict:
MALICIOUS
Link:
https://labs.inquest.net/dfi/sha256/e785dc7389084a775373d02a861bab1e75582570363cd6773ef2b986a0a1857a
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/e785dc7389084a775373d02a861bab1e75582570363cd6773ef2b986a0a1857a/
Threat name:
Win32.Trojan.IcedID
Create hunting rule
Status:
Malicious
First seen:
2022-08-31 15:40:09 UTC
File Type:
Binary (Archive)
Extracted files:
1
AV detection:
1 of 41 (2.44%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=46c5y44jbbfhou3t2avimg5ldz2vqjlqgy6nm5z66k4ynifbqv5a._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
IcedID
Score:
0.90
Link:
https://yomi.yoroi.company/submissions/e785dc7389084a775373d02a861bab1e75582570363cd6773ef2b986a0a1857a

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments