MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 fed8e49b8d4018692f1a1ba065354cfa3f68362668db1193162ad8e2a7f7496d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: fed8e49b8d4018692f1a1ba065354cfa3f68362668db1193162ad8e2a7f7496d
SHA3-384 hash: 8f69e5720c907491aab073206cb20d9a077ea5c3caeab1d33c79743b8e5163e6bfbf6d0e87c3f176b3c579b3ffe5f0f0
SHA1 hash: 25ef36bfda30a66364856f45484c105dc45d4d2f
MD5 hash: 0f6abcf65cbeeb1a8a84f041d5ac6990
humanhash: uncle-item-lamp-king
File name:List of samples 1,4,5 8 Order_List 43 .rar
Download: download sample
File size:2'173'837 bytes
First seen:2020-08-14 07:59:36 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 49152:TVb4/4hPULyouHAqVHt9wz7o/AKgwfz4y:TVsAhP0CzX9wgAqfky
TLSH D9A533CAEE601B31321EB43B5C615940BFA377C6F205033FA92FC7A845E9999C68D617
Reporter abuse_ch
Tags:rar


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: SADEEMRDP
Sending IP: 37.48.83.6
From: MGC Global Trade <mgc@triangla.com>
Subject: List of samples 1,4,5 , 8 & Order_List 43
Attachment: List of samples 1,4,5 8 Order_List 43 .rar (contains "Samples 234621 & Order_List 43 .exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
58
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/fed8e49b8d4018692f1a1ba065354cfa3f68362668db1193162ad8e2a7f7496d/
Threat name:
ByteCode-MSIL.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2020-08-14 08:01:08 UTC
AV detection:
11 of 48 (22.92%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=73mojg4niamgsly2doqgknkm7i7wqnrgndnrdeywflmofj7xjfwq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/fed8e49b8d4018692f1a1ba065354cfa3f68362668db1193162ad8e2a7f7496d

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

rar fed8e49b8d4018692f1a1ba065354cfa3f68362668db1193162ad8e2a7f7496d

(this sample)

Executable exe 9dbd3d33f93d61659ba4cf9213ed43b694f091bd08ba634595f68576f0881fcf

  
Dropping
MD5 4f9be1a61b85b6266c96cd231cc55aff
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 9dbd3d33f93d61659ba4cf9213ed43b694f091bd08ba634595f68576f0881fcf

Comments