MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ec01c971910cefaf107cd44a7d4c7e68d6e1659ee24c60340c505511d37104b3. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	ec01c971910cefaf107cd44a7d4c7e68d6e1659ee24c60340c505511d37104b3
SHA3-384 hash:	83b9a0924c277aed94a1b9c9794a61a4e0b93de883447674f4fa67b7cc70695fdd1b323c800cd22be88a40e7c0dae9d4
SHA1 hash:	07df3200e1a7edaebfa44031dfc375eac3374809
MD5 hash:	f2ea3d4b06e447ca5b44df6ba8cd4a9a
humanhash:	mexico-stream-early-august
File name:	506a64c619580bc91a51bde3a3c3f5aced3ed1106413ac11a721c56817b04573.7z
Download:	download sample
File size:	36'150 bytes
First seen:	2023-12-23 22:10:28 UTC
Last seen:	Never
File type:	7z
MIME type:	application/x-7z-compressed
Note:	This file is a password protected archive. The password is: infected
ssdeep	768:18/fNqFe5GVTagDORFAPa/CCwN39MWhW1kKLxZp/J485ATb:18/FqFWNxbQHwxZpW85ATb
TLSH	T127F20205BCF4EE9D7A00D884B24D42982532BAF6606D5C697F7E194C1FCBC264D0EF91
TrID	57.1% (.7Z) 7-Zip compressed archive (v0.4) (8000/1) 42.8% (.7Z) 7-Zip compressed archive (gen) (6000/1)
Reporter	Gi7w0rm
Tags:	7z pdf_lnk_powershell Target_Bellincat USAid_Lure

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

194

Origin country :

DE

File Archive Information

This file is a password protected archive. The password is: infected

This file archive contains 1 file(s), sorted by their relevance:

Other files 1

File name:	506a64c619580bc91a51bde3a3c3f5aced3ed1106413ac11a721c56817b04573
File size:	35'888 bytes
SHA256 hash:	506a64c619580bc91a51bde3a3c3f5aced3ed1106413ac11a721c56817b04573
MD5 hash:	fe3754e738187810f1a44485e5f3cf1d
MIME type:	application/zip

Vendor Threat Intelligence

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

autorun masquerade powershell

Link:

https://www.filescan.io/uploads/65875af9b855eb3693f0c56f/reports/0556831e-6cdc-40f1-8f6b-9114e7772bbd/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/ec01c971910cefaf107cd44a7d4c7e68d6e1659ee24c60340c505511d37104b3

InQuest MALICIOUS

Result

Verdict:

MALICIOUS

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/ec01c971910cefaf107cd44a7d4c7e68d6e1659ee24c60340c505511d37104b3/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=5qa4s4mrbtx26ed42rfh2td6ndloczm64jgganamkbkrdu3raszq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/ec01c971910cefaf107cd44a7d4c7e68d6e1659ee24c60340c505511d37104b3