MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f18652128eed28061610cd1b5c19d5189e3204487934ab67a5d805e0ab64e78b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	f18652128eed28061610cd1b5c19d5189e3204487934ab67a5d805e0ab64e78b
SHA3-384 hash:	13f18c94340b828fd9fd6b61b367337de39bbaec301e97349dec600317ec020e9f662b68466d4e844f4d46caaaf17ce0
SHA1 hash:	d59b673cf773db9f4b16b806825b2638a582b22b
MD5 hash:	30628f0f7f9870aef93172de5936bab6
humanhash:	lion-hamper-idaho-eight
File name:	informeCritico.pdf
Download:	download sample
File size:	24'378 bytes
First seen:	2023-01-25 12:54:17 UTC
Last seen:	2023-02-01 23:17:02 UTC
File type:	pdf
MIME type:	application/pdf
ssdeep	384:YPH1+0O5hhSLH6LS19rMKAN90SVnErRPHVhJp3SbEQSVnEbaCPHLh61SVnELaW8r:oHoJH8aLS/DcueEVHDjibBeE9HVSeERa
TLSH	T115B2736EB80E0CED801AEE456AF5F847D8277042AAC99DC37AD7CD176010FA26D0D793
Reporter	JAMESWT_WT
Tags:	pdf

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

400

Origin country :

IT

Vendor Threat Intelligence

DocGuard Malicious

Result

Verdict:

Malicious

File Type:

PDF File

Link:

https://app.docguard.net/f18652128eed28061610cd1b5c19d5189e3204487934ab67a5d805e0ab64e78b/results/dashboard

Payload URLs

URL

File name

http://198.27.82.39:8000/hola.html

PDF File

FileScan.IO No Threat

Verdict:

No Threat

Threat level:

  10/10

Confidence:

100%

Link:

https://www.filescan.io/uploads/63d126a71c9cbf7d625294f9/reports/f5d988ba-93d7-40d9-b7b1-c220106184ea/overview

inlyse Malware.AI Malicious

Label:

Malicious

Suspicious Score:

6.1/10

Score Malicious:

62%

Score Benign:

38%

Link:

https://www.malware.ai/gui/files/?id=08cd8e40-523c-4866-a5b2-3fbde5986c33

Joe Sandbox clean

Result

Threat name:

Unknown

Detection:

clean

Classification:

n/a

Score:

1 / 100

Link:

https://www.joesandbox.com/analysis/1158699

Behaviour

Behavior Graph:

n/a

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/f18652128eed28061610cd1b5c19d5189e3204487934ab67a5d805e0ab64e78b/

ReversingLabs TitaniumCloud Document-PDF.Trojan.Heuristic

Threat name:

Document-PDF.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2023-01-25 12:54:25 UTC

File Type:

Document

Extracted files:

20

AV detection:

10 of 25 (40.00%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=6gdfeeuo5uuamfqqzunvygovdcpdebcipe2kwz5f3ac6bk3e46fq._file

VMRay Malicious

Verdict:

Malicious

Link:

https://www.vmray.com/analyses/_mb/f18652128eed/report/overview.html

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.65

Link:

https://yomi.yoroi.company/submissions/f18652128eed28061610cd1b5c19d5189e3204487934ab67a5d805e0ab64e78b