MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 266bcf513c449de3d73e47b2dfc78ad38b5872de457371d563f2f7aa78ad9736. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


HawkEye


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 266bcf513c449de3d73e47b2dfc78ad38b5872de457371d563f2f7aa78ad9736
SHA3-384 hash: ed625e3d257028bd0f62e25dd03c2bfd3e82c0c8c8ad7755e724f1c4921454efe62033c88ae07213e1b86416df59ef5c
SHA1 hash: ac7e62aa8f67e4da29ab1dcb4e0e734dd95711cc
MD5 hash: 28bb0272a317cae969312a59a683391d
humanhash: stream-high-victor-red
File name:BALANCE PAYMENT OF INV #005788903736282 20200418.rar
Download: download sample
Signature HawkEye
Create hunting rule
File size:665'364 bytes
First seen:2020-04-20 10:23:49 UTC
Last seen:2020-04-21 04:28:05 UTC
File type: rar
MIME type:application/x-rar
ssdeep 12288:43s63Nrre5xOVb7E1T/DOEmyO57guEu3YEX+WzJRfdQx1CvSidehwF:cf3NraDO572T/qL3VXbb+XC6X6
TLSH 00E4232052E0E7ABC2D61FD7B70FDA58665829FE19B83885B8493D6112F13F48C42DDE
Reporter cocaman
Tags:HawkEye rar


Avatar
cocaman
Malicious email
From: "Gonzalez" <jgonzalez@groupoibero.com>
Received: from groupoibero.com (unknown [103.133.111.162])
Date: 20 Apr 2020 03:21:32 -0700
Subject: RE: RE: BALANCE PAYMENTS OF OUTSTANDING SOA

Intelligence

File Origin
# of uploads :
6
# of downloads :
89
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Agensla
Create hunting rule
Status:
Malicious
First seen:
2020-04-20 10:35:23 UTC
File Type:
Binary (Archive)
Extracted files:
23
AV detection:
17 of 31 (54.84%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=ezv46uj4iso6hvz6i6zn7r4k2ofvq4w6ivzxdvld6l32u6fns43a._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

HawkEye

rar 266bcf513c449de3d73e47b2dfc78ad38b5872de457371d563f2f7aa78ad9736

(this sample)

HawkEye

Executable exe c271672581636a2e9c2ee6f37539e943ec60988136a81a657f7ed07f4e21b45a

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 c271672581636a2e9c2ee6f37539e943ec60988136a81a657f7ed07f4e21b45a

Comments