MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e9c4c8ba7977a65b5aacfda5926b44af00126f6444170a7a955f203c7ec7a4b7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


M00nD3v


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: e9c4c8ba7977a65b5aacfda5926b44af00126f6444170a7a955f203c7ec7a4b7
SHA3-384 hash: c2a7b107c4fee282cbd2ea863ac6139a07d560c1c46e0500470a4fd5e751d43d5687e9b7b50e4ee4e6a9b3c0a989fb55
SHA1 hash: 0ae7fd5e66fcd899bb1507064e75ad276ddfabaf
MD5 hash: 5d1a2a31266cecca65af470a3a501a3b
humanhash: paris-romeo-edward-london
File name:APPROVE ORDER.zip
Download: download sample
Signature M00nD3v
Create hunting rule
File size:356'161 bytes
First seen:2020-05-27 07:44:04 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:eXn98wAUF0tBrXbrRqmSmEu9mLH+ulbyNi8NcDne8VJIIXaarLCmCD5PvGg29fSj:E27rhvSEAD+ulG88NcDneUXqaKm8V+7y
TLSH B87423A1A20B873194CDF57487A48CA8C13BD78C4D698D912FF1252C7F3F5EDA09B4A6
Reporter abuse_ch
Tags:M00nD3v zip


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: spitznas.de
Sending IP: 37.49.230.215
From: Gerlach Alice <alice.gerlach@spitznas.de>
Reply-To: Gerlach Alice <alice.gerlach@spitznas.de>
Subject: RE: RE: ORDER APPROVAL
Attachment: APPROVE ORDER.zip (contains "APPROVE ORDER .exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
70
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Artemis96B3B7FCBA73.31793.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.Noon
Create hunting rule
Status:
Malicious
First seen:
2020-05-27 09:13:17 UTC
File Type:
Binary (Archive)
Extracted files:
4
AV detection:
11 of 47 (23.40%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

M00nD3v

zip e9c4c8ba7977a65b5aacfda5926b44af00126f6444170a7a955f203c7ec7a4b7

(this sample)

M00nD3v

Executable exe ee6195ec1370d529ba036d6ce5f7ca391822519455a57817e1576ac8a45b8b8d

  
Dropping
MD5 96b3b7fcba7348f92c8b0a888f0bc619
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 ee6195ec1370d529ba036d6ce5f7ca391822519455a57817e1576ac8a45b8b8d

Comments