MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2815c2c67b69c3a19c051229e923584a03be558eabfd9965e34cf95d14aaf102. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


HawkEye


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 2815c2c67b69c3a19c051229e923584a03be558eabfd9965e34cf95d14aaf102
SHA3-384 hash: 7bbf6ab347f56bcaf94a4e7977f0ef39ec34196492bbc84dbc22ba76ebe7a614973d6211e7ef6079b5584d3ee36aebe2
SHA1 hash: 562461c08dee5506fd23474c86558d28c5afe7bd
MD5 hash: 3b6263abf6c969b80ed809b22fa38949
humanhash: floor-lion-social-fish
File name:Demande client 001259.r00
Download: download sample
Signature HawkEye
Create hunting rule
File size:5'448 bytes
First seen:2020-07-29 11:09:40 UTC
Last seen:Never
File type: r00
MIME type:application/x-rar
ssdeep 96:AWVoQgGhwsEEfvRhTcYzUu0WeGcTBic0lpG2CWC6D:AWVK2JXTchu3cTB/0lfC6D
TLSH 5DB17EE89C221290CC214BCA72A22DF1FC55596FFE12EB5C417E6E850B0A274CAE7585
Reporter abuse_ch
Tags:HawkEye r00


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: ns124.easy.gr
Sending IP: 78.108.43.98
From: Sébastien Laprade <lys@clasquin.com>
Subject: Clasquin France SARL - Demande client: 001259
Attachment: Demande client 001259.r00 (contains "Clasquin France SARL - Demande client 001259 - SKBMT-07-29-2020-115-img00273.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
63
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/2815c2c67b69c3a19c051229e923584a03be558eabfd9965e34cf95d14aaf102/
Threat name:
Win32.Trojan.Ymacco
Create hunting rule
Status:
Malicious
First seen:
2020-07-29 11:11:04 UTC
AV detection:
11 of 48 (22.92%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=fak4frt3nhb2dhafciu6si2yjib34vmovp6zszpdjt4v2ffk6eba._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Kryptik
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/2815c2c67b69c3a19c051229e923584a03be558eabfd9965e34cf95d14aaf102

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

HawkEye

r00 2815c2c67b69c3a19c051229e923584a03be558eabfd9965e34cf95d14aaf102

(this sample)

HawkEye

Executable exe d6f0e1365d769f70ace2165f7f38917d65bc8d404f9a03f22db289d9de36e9a4

  
Dropping
MD5 559c048d074732b231dc3889a8d74bbf
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 d6f0e1365d769f70ace2165f7f38917d65bc8d404f9a03f22db289d9de36e9a4

Comments