MALICIOUS — 528744f2aaa6f858940b1e48366772e48adcfc246dfacfb8ab9cfe73cffeaabf

MALICIOUS — 528744f2aaa6f858940b1e48366772e48adcfc246dfacfb8ab9cfe73cffeaabf is a email sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (89/100), attributed to the Docusign112101 family. 1 of 50 detection engines flagged it.

Identification

• SHA-256: 528744f2aaa6f858940b1e48366772e48adcfc246dfacfb8ab9cfe73cffeaabf
• SHA-1: 3fa9aa5b8c1b8de9f98141af66ac2e91d6cae9ec
• MD5: f74ee1de4ee77e1f83e5309b8aead120
• ssdeep: 3072:yjls54KssHO91+l5caHRcdHzsabn1DKeU:yjls547H9kcQRsd1DKH
• TLSH: T1D33C0201A973BBA34F8F527682E589C7398094001FC6088AD63E5D94D6BD8F3E9F56D0
• Submitted as: 528744f2aaa6f858940b1e48366772e48adcfc246dfacfb8ab9cfe73cffeaabf
• File type: email · Size: 122036 bytes
• Verdict: malicious (89/100) · Family: Docusign112101

Detections (1 of 50 engines)

• ClamAV (daily): Xls.Downloader.Docusign112101-9908076-0

Why this verdict

The malicious score of 89/100 is the fusion of 2 weighted signals:

• ClamAV (daily) flagged Xls.Downloader.Docusign112101-9908076-0 (rule Xls.Downloader.Docusign112101-9908076-0) - engine signal, weight 0.90, confidence 0.95
• Suspicious email carrier: archive-attachment - static signal, weight 0.30, confidence 0.70

Embedded domains

• 636180df3d70ba7856.com
• 343a0b.net

More Docusign112101 samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report