MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 1d49444035e343cd69c404f6382c1b5b88df077559444b324ea40bdaf8efb280. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
RemcosRAT
Vendor detections: 2
| SHA256 hash: | 1d49444035e343cd69c404f6382c1b5b88df077559444b324ea40bdaf8efb280 |
|---|---|
| SHA3-384 hash: | 65598d8aafcc628c87a501626a6b1c1d247dc9ca46d416ca7351ef2a74b6f31d4baa2bf15240f66363787048dbc1eccc |
| SHA1 hash: | 16bcc7b67f26a7a29f06f3a9adeef1576cf78023 |
| MD5 hash: | f379fd4d026d156e4d73af7f99984e0a |
| humanhash: | arizona-asparagus-failed-california |
| File name: | 14082020 PDF.UU |
| Download: | download sample |
| Signature | RemcosRAT |
| File size: | 298'632 bytes |
| First seen: | 2020-08-14 18:19:41 UTC |
| Last seen: | Never |
| File type: | rar |
| MIME type: | application/x-rar |
| ssdeep | 6144:RD2XrK3mZ1a5hpKZIQfE702N+FJps9F27tE63d/GBNJMm1I0Z:RD2X+mbeKZIyodwWF27nlRs |
| TLSH | DE54234D3DFFF943B6C0277C2FF01F122D098C28ACF76E976849A1E9194112E2569975 |
| Reporter |  abuse_ch |
| Tags: | Outlook RemcosRAT uu |
abuse_ch
Malspam distributing unidentified malware:HELO: NAM11-CO1-obe.outbound.protection.outlook.com
Sending IP: 40.92.18.50
From: ELECTROKIT . <electrokit123@hotmail.com>
Subject: DOCUMENTO PDF
Attachment: 14082020 PDF.UU (contains "14082020 PDF.exe")
Intelligence
File Origin
# of uploads :
1
# of downloads :
71
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.