🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ffacb0c49504cb2bbf77d0f93472198a24032ee6ff29da2ec16e926e48012623. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


IcedID


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: ffacb0c49504cb2bbf77d0f93472198a24032ee6ff29da2ec16e926e48012623
SHA3-384 hash: b9f9fcfb6439b8c66a32c0257cb8e5a5d085e8e5fb929f70e36e40db93b1c9ab98a0a8741b6941e658493af1aa603cf7
SHA1 hash: 5ede9ba14bce7f7c27f9e6c9b5a14eeffe4a1a19
MD5 hash: 1d6d65a2a7422110e6e651f0b90802d0
humanhash: green-don-sodium-carbon
File name:index.7z
Download: download sample
Signature IcedID
Create hunting rule
File size:2'848'119 bytes
First seen:2022-10-06 12:17:33 UTC
Last seen:Never
File type: 7z
MIME type:application/x-7z-compressed
ssdeep 49152:tJZrqQiLfJN4yfThz39VWtCoZ+iykAcS4irvleJqKitqD/ICJLx8LuapYw6wji8Y:1W5Zh9VCCoZHfKleJqKiqDx8Lu0YPwj8
TLSH T172D5235BEC477F04D326C19F8C454A28446511BEBE137B1B36BAA623CFD1C8EB42598B
TrID 57.1% (.7Z) 7-Zip compressed archive (v0.4) (8000/1)
42.8% (.7Z) 7-Zip compressed archive (gen) (6000/1)
Reporter JAMESWT_WT
Tags:7z agenziaentrate dropped payload file-pumped IcedID ITA

Intelligence

File Origin
# of uploads :
1
# of downloads :
222
Origin country :
n/a
File Archive Information

This file archive contains 1 file(s), sorted by their relevance:

File name:index
Pumped file This file is pumped. MalwareBazaar has de-pumped it.
File size:487'981'056 bytes
SHA256 hash: b33d8c4771ec0f51c052c4589a05b40438dce184cf022541bb8766c5a703e595
MD5 hash: 9106ad28cbbe1dc595576b39671f9dde
De-pumped file size:487'981'056 bytes (Vs. original size of 487'981'056 bytes)
De-pumped SHA256 hash: b33d8c4771ec0f51c052c4589a05b40438dce184cf022541bb8766c5a703e595
De-pumped MD5 hash: 9106ad28cbbe1dc595576b39671f9dde
MIME type:text/plain
Signature IcedID
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.GenericKD.62566383.18185.5581.UNOFFICIAL
Create hunting rule

Gathering data
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/ffacb0c49504cb2bbf77d0f93472198a24032ee6ff29da2ec16e926e48012623/
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=76wlbrevatfsxp3x2d4ti4qzrisaglxg74u5ulwbn2jg4sabeyrq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/ffacb0c49504cb2bbf77d0f93472198a24032ee6ff29da2ec16e926e48012623

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments