MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f0ff773647f335158d4224a1571eb925b2f5ec9c74427e0064d49c1358283fe1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



NanoCore


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: f0ff773647f335158d4224a1571eb925b2f5ec9c74427e0064d49c1358283fe1
SHA3-384 hash: 0d58d29e9a5419d269eb5d6403402dfd7eb01a135453808b13209a70bb2a288def6a9269c59bfa59f0f13ea552d57601
SHA1 hash: e8c6983723c1bd1e5ee36a9000d2a2189003661f
MD5 hash: 5a2f61311fee6bc274e78062cb14a2a8
humanhash: ten-november-magazine-monkey
File name:RFQ_Report_197_pdf____.iso
Download: download sample
Signature NanoCore
File size:516'096 bytes
First seen:2021-01-29 09:30:24 UTC
Last seen:2021-01-30 12:58:21 UTC
File type: iso
MIME type:application/x-iso9660-image
ssdeep 6144:OAdkDqWzI8wtqKCA5+CjWCPAUpujKNI7+2K/kfw2TLz9DfXXJUSgc:OACVw190zKNmK/ko2Tt+Jc
TLSH 5DB4C59A18004D6DF49826F1B680F2F999E25B35E6BC2B99D3D6F938833EC4370175C6
Reporter lowmal3
Tags:NanoCore

Intelligence


File Origin
# of uploads :
2
# of downloads :
112
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
Win32.Trojan.NanoBot
Status:
Malicious
First seen:
2021-01-29 07:59:29 UTC
AV detection:
5 of 46 (10.87%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

NanoCore

iso f0ff773647f335158d4224a1571eb925b2f5ec9c74427e0064d49c1358283fe1

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments