MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f4f5b27de0f22e676db02e97e9c962c7657d4cd02f241b33a069f9b64f3bab9c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	f4f5b27de0f22e676db02e97e9c962c7657d4cd02f241b33a069f9b64f3bab9c
SHA3-384 hash:	01f11b6ae0942bb27d63facc7dbc218700dd927b3fed20e39fb432fea4da8d04f6be1dd3316eed222d9888338431e49a
SHA1 hash:	eb88e36c37ab33fd17d3d4b2756b15480234aece
MD5 hash:	a4012d9c52af52c47853d8ac70e57b15
humanhash:	muppet-triple-oregon-sierra
File name:	DICTAR.pdf
Download:	download sample
Signature	Pikabot Alert Create hunting rule
File size:	142'972 bytes
First seen:	2023-12-12 22:22:03 UTC
Last seen:	Never
File type:	pdf
MIME type:	application/pdf
ssdeep	3072:vTeIv4WIhwFlN2gnLR6JFu/dEYhHWxlM2qlCnrBjr8mOg7GmL39MgbmxM:bH4Bw3o0LQFyTolM3lCtjnSk3NmxM
TLSH	T1E4D3F188D5D9CB1E85B884B6926D0DD63192C14B4CC5B8B548FBF602BEC3A48E7F1D93
Reporter	proxylife
Tags:	pdf Pikabot

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

546

Origin country :

US

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.PDF.Phishing.ODIV.tr.5018.27197.UNOFFICIAL

Alert

Create hunting rule

DocGuard Clean

Result

Verdict:

Clean

File Type:

PDF File

Link:

https://app.docguard.net/f4f5b27de0f22e676db02e97e9c962c7657d4cd02f241b33a069f9b64f3bab9c/results/dashboard

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

phishing

Link:

https://www.filescan.io/uploads/6578dd468b5ba47db2e06f40/reports/d2342e25-e955-4a02-a76d-11fab06a2712/overview

Hybrid Analysis Hoax.PDF.Phish

Verdict:

Suspicious

Labled as:

Hoax.PDF.Phish

Link:

https://www.hybrid-analysis.com/sample/f4f5b27de0f22e676db02e97e9c962c7657d4cd02f241b33a069f9b64f3bab9c

inlyse Malware.AI Benign

Label:

Benign

Suspicious Score:

2.9/10

Score Malicious:

29%

Score Benign:

71%

Link:

https://www.malware.ai/gui/files/?id=f36f09c5-da2b-430a-ab80-b431aac0de52

Joe Sandbox clean

Result

Threat name:

n/a

Detection:

clean

Classification:

n/a

Score:

3 / 100

Link:

https://www.joesandbox.com/analysis/1360897

Behaviour

Behavior Graph:

n/a

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/f4f5b27de0f22e676db02e97e9c962c7657d4cd02f241b33a069f9b64f3bab9c/

ReversingLabs TitaniumCloud Document-PDF.Trojan.Phish

Threat name:

Document-PDF.Trojan.Phish

Alert

Create hunting rule

Status:

Malicious

First seen:

2023-12-12 18:29:28 UTC

File Type:

Document

Extracted files:

1

AV detection:

12 of 37 (32.43%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=6t23e7pa6ixgo3nqf2l6tslcy5sx2tgqf4sbwm5anh43mtz3vooa._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Pikabot

Threat name:

Pikabot

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/f4f5b27de0f22e676db02e97e9c962c7657d4cd02f241b33a069f9b64f3bab9c