MALICIOUS — bba8161c10e399ab4458f291740b7b61b0ac6e11b37b7f7db3f55193e6523dc3

MALICIOUS — bba8161c10e399ab4458f291740b7b61b0ac6e11b37b7f7db3f55193e6523dc3 is a email sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (89/100), attributed to the Docusign112101 family. 2 of 53 detection engines flagged it.

Identification

• SHA-256: bba8161c10e399ab4458f291740b7b61b0ac6e11b37b7f7db3f55193e6523dc3
• SHA-1: 500246a2faef4ff9ea2447b1e098d5ff3381563f
• MD5: a673ec5e19ac4a39f7b73b2079539718
• ssdeep: 3072:3BdW/GmunsWdJBPyd2ahFZ/6DzqOkF1Rbamiv7XK8h2jGC6MUS:XW/H86JFMqOkF1cm2X32jGI
• TLSH: T1803C128535710F87FA057890D11A8223A835EDAD3CB4295B4E832E9BCEF797391885D4
• Submitted as: bba8161c10e399ab4458f291740b7b61b0ac6e11b37b7f7db3f55193e6523dc3
• File type: email · Size: 122014 bytes
• Verdict: malicious (89/100) · Family: Docusign112101

Detections (2 of 53 engines)

• ClamAV (daily): Xls.Downloader.Docusign112101-9908076-0
• Emsisoft (Emergency Kit): Trojan.Generic.38778257

Why this verdict

The malicious score of 89/100 is the fusion of 2 weighted signals:

• ClamAV (daily) flagged Xls.Downloader.Docusign112101-9908076-0 (rule Xls.Downloader.Docusign112101-9908076-0) - engine signal, weight 0.90, confidence 0.95
• Suspicious email carrier: archive-attachment - static signal, weight 0.30, confidence 0.70

Embedded domains

• 54d1a9120d.com
• 343a0b.net

More Docusign112101 samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report