MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e923d7fbf8b7610ecd51c3d2390f1ea0f9cc75dd3e7b487b6a9ca74bbb52833c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: e923d7fbf8b7610ecd51c3d2390f1ea0f9cc75dd3e7b487b6a9ca74bbb52833c
SHA3-384 hash: cf56cf79179c9166cf50635cb50b9a1e351c2b5896ca7d1fd5b83a55b924a927d7dbecc3fef6ae09029bf145f7aa6aba
SHA1 hash: 7c6707ec0d6584afa39ff7f27926a9e22dd89973
MD5 hash: f3d77e2d9ba79e81700240084c0426ea
humanhash: single-angel-venus-four
File name:INV_636523027481639.r00
Download: download sample
File size:944'263 bytes
First seen:2020-08-10 11:49:01 UTC
Last seen:Never
File type: r00
MIME type:application/x-rar
ssdeep 24576:GYd2t/NzHKQ+/jgf14T69qpljHg4LU7ryK:GYdIHKQUgfST69CjAUq2K
TLSH C4152325ED28F644D73695F17112389AF6BFB114031E0A3254A4E8BC63457CFBE22AB6
Reporter abuse_ch
Tags:r00


Avatar
abuse_ch
Malspam distributing unidentified malware:

From: "Palm Investment S.A" <info@palmtextiles.gr>
Subject: EXW-INV638492648829 Signed Fatura
Attachment: INV_636523027481639.r00 (contains "INV_636523027481639.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
58
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/e923d7fbf8b7610ecd51c3d2390f1ea0f9cc75dd3e7b487b6a9ca74bbb52833c/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-08-10 11:50:12 UTC
AV detection:
17 of 48 (35.42%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=5er5p67yw5qq5tkrypjdsdy6ud44y5o5hz5uq63ktstuxo2sqm6a._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/e923d7fbf8b7610ecd51c3d2390f1ea0f9cc75dd3e7b487b6a9ca74bbb52833c

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

r00 e923d7fbf8b7610ecd51c3d2390f1ea0f9cc75dd3e7b487b6a9ca74bbb52833c

(this sample)

Executable exe 93a1f0fa0637acd096c86ec4d7d3c6f73f689bf41f3cd16b5e5bcce48dcdc540

  
Dropping
MD5 7c270b22b94ce6ad9553abebebef6362
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 93a1f0fa0637acd096c86ec4d7d3c6f73f689bf41f3cd16b5e5bcce48dcdc540

Comments