MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 56243bb09bc9c59ec8aaa5cfa6af5742606fdd80513160f7ef48902973e74812. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


HawkEye


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 56243bb09bc9c59ec8aaa5cfa6af5742606fdd80513160f7ef48902973e74812
SHA3-384 hash: 4ee6294e202268189ab97691cb8bb69971c95c0602432ee4d3b0f2e12149cc39e44df74bdbd49d6e2ebf140b38ad8934
SHA1 hash: f3da367eb928b44c65afac1f5773a87c62de91f2
MD5 hash: aabab00b7e18b18643792f513b5c3833
humanhash: virginia-berlin-orange-spaghetti
File name:BALANCE PAYMENT OF INV #005788903736282 20200418.rar
Download: download sample
Signature HawkEye
Create hunting rule
File size:330'115 bytes
First seen:2020-04-21 12:07:31 UTC
Last seen:2020-04-21 17:35:13 UTC
File type: rar
MIME type:application/x-rar
ssdeep 6144:VFLeF8xQnKe6LiauuRpyrCQllBC21cNmdUgWylAjUtYqbE+uYBL07rm/H12Is2BY:jeG9eiiXuerf/w21cNmdUgOjUw+uYBLm
TLSH F66423A628B0F79B1DEB76D171C80F6A5356184663EFA80F65174ED3228C126E13B1CF
Reporter cocaman
Tags:HawkEye rar


Avatar
cocaman
Malicious email
From: "Zheng Wei" <zhengwei@hengsen.com>
Received: from hengsen.com (unknown [103.133.111.162])
Date: 21 Apr 2020 05:01:12 -0700
Subject: RE: Urgent_Confirm Invoice details for Payment

Intelligence

File Origin
# of uploads :
2
# of downloads :
94
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Heye
Create hunting rule
Status:
Malicious
First seen:
2020-04-22 03:54:11 UTC
File Type:
Binary (Archive)
Extracted files:
20
AV detection:
18 of 31 (58.06%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=kysdxme3zhcz5sfkuxh2nl2xijqg7xmakeywb57pjcics47hjaja._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

HawkEye

rar 56243bb09bc9c59ec8aaa5cfa6af5742606fdd80513160f7ef48902973e74812

(this sample)

HawkEye

Executable exe 4baf908e1965d8126d27be6eda11a4153c94ac0350e4d4856af65c60af4dfdcd

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 4baf908e1965d8126d27be6eda11a4153c94ac0350e4d4856af65c60af4dfdcd

Comments