MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 99a87c2c10eda3c24c709823d65917cfdff280fbcd9d8e11b716f4c59dcfff19. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AveMariaRAT


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 99a87c2c10eda3c24c709823d65917cfdff280fbcd9d8e11b716f4c59dcfff19
SHA3-384 hash: 9da3df7862efaf6e7b4f68dd6226136b38f246a14cc5dfe3c09db7d9531fa56beb08f95ee67e752d87acab2e9ecac841
SHA1 hash: 2c43db265633dea74e11268530c0c5e5674e892c
MD5 hash: 980ef66841667856d94e19abdb4b0600
humanhash: yellow-spaghetti-network-ceiling
File name:Sudhir PO 31051,pdf.zip
Download: download sample
Signature AveMariaRAT
Create hunting rule
File size:245'582 bytes
First seen:2020-07-01 09:11:47 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:RumBK/0FB5tzFgAoRvI+S2Maps+1EmNVJl6rG:Ruma89zFglvIQPDGmjJl6rG
TLSH 78342350BCADA046CD60DEAD5DF3B7224BE0D4D546E71A4491B04FC87A1ABC73E8EC46
Reporter jarumlus
Tags:AveMariaRAT

Intelligence

File Origin
# of uploads :
1
# of downloads :
72
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.26176.ZipHeur.BadExt.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/99a87c2c10eda3c24c709823d65917cfdff280fbcd9d8e11b716f4c59dcfff19/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-07-01 09:13:05 UTC
AV detection:
23 of 29 (79.31%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=tguhylaq5wr4etdqtar5mwixz7p7fah3zwoy4enxc32mlhop74mq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AveMariaRAT

zip 99a87c2c10eda3c24c709823d65917cfdff280fbcd9d8e11b716f4c59dcfff19

(this sample)

AveMariaRAT

Executable exe 548a56a8561e017d98d7c207236ec0e072a33636fc5ecec193ba5ace0e2e8a05

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 548a56a8561e017d98d7c207236ec0e072a33636fc5ecec193ba5ace0e2e8a05
  
Dropping
MD5 faf4b45bf5be885c21b44c4dc9d473b3

Comments