MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4b052753c4ac62ea2b88d0fcc74ef9f2bd1944d733ee603f1fefaa3d9d23171c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


HawkEye


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 4b052753c4ac62ea2b88d0fcc74ef9f2bd1944d733ee603f1fefaa3d9d23171c
SHA3-384 hash: 6a12689f628f7cda70feeddd8154fc091ee926261b65ee982ebd3a3d67cf3af9e5486783cc5b341b0458d054c2441977
SHA1 hash: d99d584748babe52d62282408d18c70804eab0f8
MD5 hash: 7c7e9553cd070ab903e5c644b5d09f35
humanhash: ten-august-quebec-spring
File name:PI_160420PDF ARJ005634420200429 ,pdf.rar
Download: download sample
Signature HawkEye
Create hunting rule
File size:319'103 bytes
First seen:2020-04-29 11:09:44 UTC
Last seen:2020-04-30 06:23:08 UTC
File type: rar
MIME type:application/x-rar
ssdeep 6144:RMHyx8GpWHZo9tS3I2Dj5Zybwrqlad6mtF7fwOCX1q:iyjQGfSrtZudlPEF7YOClq
TLSH B264230EDBF7BA928C88DB6FAC0F90C91588B4E4C50299093B3E5615C5627F8D65FDD0
Reporter cocaman
Tags:HawkEye rar


Avatar
cocaman
Malicious email
From: "Erin Xie" <accounting@ysy-electric.com>
Received: from ysy-electric.com (unknown [103.133.111.162])
Date: 29 Apr 2020 02:36:52 -0700
Subject: PROFORMA INVOICE PI_160420 ARJ0056344/20200409
Attachment: PI_160420PDF ARJ005634420200429 ,pdf.rar

Intelligence

File Origin
# of uploads :
3
# of downloads :
90
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Heye
Create hunting rule
Status:
Malicious
First seen:
2020-04-29 10:28:11 UTC
File Type:
Binary (Archive)
Extracted files:
20
AV detection:
21 of 48 (43.75%)
Threat level:
  2/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=jmcsou6evrrouk4i2d6motxz6k6rsrgxgpxgapy756vd3hjdc4oa._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

HawkEye

rar 4b052753c4ac62ea2b88d0fcc74ef9f2bd1944d733ee603f1fefaa3d9d23171c

(this sample)

HawkEye

Executable exe 2cc9a439b0ba13097ff33a8bb0af64130fec5c4f128c5cc4fcec7403e55ff50c

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 2cc9a439b0ba13097ff33a8bb0af64130fec5c4f128c5cc4fcec7403e55ff50c
  
Dropping
HawkEye

Comments