🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 fe4d1302203d218bc68664762e7a481c8e06cbb1d6aca13aa0a6e7b2b0d7f2c6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments

SHA256 hash: fe4d1302203d218bc68664762e7a481c8e06cbb1d6aca13aa0a6e7b2b0d7f2c6
SHA3-384 hash: 4650685d343351cfa13030eeeb27bdcfb4553a6fdbc86e98110e282b282f1bba6b3003e9e3c1ba9ed542f50caee2d77f
SHA1 hash: ccaad2db7da94ff9981c8f318cad2c7c2a9132c8
MD5 hash: de457b7a5b35e40bb74d462e3d7b7dbf
humanhash: beryllium-gee-beer-ack
File name:PURCHASE ORDER 234367 DRAWING.pdf
Download: download sample
File size:62'575 bytes
First seen:2022-02-16 16:37:31 UTC
Last seen:Never
File type: pdf
MIME type:application/pdf
ssdeep 1536:0LRqXyy1j9EgHx7aZTe/bAzUi41o764JIPe/5xYgLJ83NbBfK:0L4XZN9THx7aZTe/sGo764JIPecgd83O
TLSH T1B6530248E387982E488AD22E79C537168B5FCE97CA1106732FDD4D1A3716C98F190FE4
Reporter c_APT_ure
Tags:excel excel-in-pdf pdf


Avatar
c_APT_ure
what is that excel in the PDF doing?

Intelligence


File Origin
# of uploads :
1
# of downloads :
509
Origin country :
n/a
Vendor Threat Intelligence
Verdict:
Malicious
Threat level:
  10/10
Confidence:
100%
Tags:
CVE-2017-0199 exploit VelvetSweatshop
Label:
Malicious
Suspicious Score:
6.3/10
Score Malicious:
63%
Score Benign:
37%
Threat name:
Document-PDF.Exploit.CVE-2017-0199
Status:
Malicious
First seen:
2022-02-14 06:56:24 UTC
File Type:
Document
Extracted files:
32
AV detection:
21 of 28 (75.00%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

pdf fe4d1302203d218bc68664762e7a481c8e06cbb1d6aca13aa0a6e7b2b0d7f2c6

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments