MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 132f365a47276d41bf45bd6780dbd8b13e6f5ab8e65c3df02fb413d66fbb35e1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AveMariaRAT


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 132f365a47276d41bf45bd6780dbd8b13e6f5ab8e65c3df02fb413d66fbb35e1
SHA3-384 hash: 85e3914d8f92d207ad258a06be50848bd89d5b2b37f32f51840f96704b0898e11f0364a506f94c0cb6d736fd6a34a020
SHA1 hash: 32152ed013dc9c98b84820e99ee7de88491c3438
MD5 hash: 72b916a5f18efead3e6ecd24c86fa3eb
humanhash: burger-batman-shade-hot
File name:Detalles de la descripción de la oferta del producto.iso
Download: download sample
Signature AveMariaRAT
Create hunting rule
File size:110'592 bytes
First seen:2020-11-06 17:22:57 UTC
Last seen:Never
File type: iso
MIME type:application/x-iso9660-image
ssdeep 768:te82D3NTa2iXcMf/Vq8NHJlCge+64h0QdwJgFmpaFZUf2h:tePD3NT3iXcM1qm3CzJ4HljUf
TLSH 57B33F403245FD2FCEAA0E301F61DD6626B3EA711861C309F4AC499CDB436B63C6D6DA
Reporter abuse_ch
Tags:AveMariaRAT iso


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: internet.pacifik.cl
Sending IP: 190.121.26.139
From: Maria García <account@atlanticnavigation.com>
Subject: Precio de oferta
Attachment: Detalles de la descripción de la oferta del producto.iso (contains "Detalles de la descripción de la oferta del producto.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
110
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.Siggen10.49839.22451.14669.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/132f365a47276d41bf45bd6780dbd8b13e6f5ab8e65c3df02fb413d66fbb35e1/
Threat name:
ByteCode-MSIL.Backdoor.Androm
Create hunting rule
Status:
Malicious
First seen:
2020-11-06 03:33:41 UTC
AV detection:
13 of 48 (27.08%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=cmxtmwshe5wudp2fxvtybw6ywe7g6wvy4zod34bpwqj5m353gxqq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AveMariaRAT

iso 132f365a47276d41bf45bd6780dbd8b13e6f5ab8e65c3df02fb413d66fbb35e1

(this sample)

AveMariaRAT

Executable exe 1b22b166ce3ca7e4037817f694b36beefb1faad44406f7fef1ab939935c671a1

  
Dropping
MD5 502d698a9ad79153b2ba063553393d3c
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 1b22b166ce3ca7e4037817f694b36beefb1faad44406f7fef1ab939935c671a1

Comments