MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 23cae5cce339ef9de5d22c2117af79d45013d65241fbe6faa7a36e94e191b42b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



AveMariaRAT


Vendor detections: 9


Intelligence 9 IOCs YARA File information Comments

SHA256 hash: 23cae5cce339ef9de5d22c2117af79d45013d65241fbe6faa7a36e94e191b42b
SHA3-384 hash: 7e90af02ad10a6c32261d935124466009c032be78ce9b44d1f2039b6083ce96c2ccd4db97d2bf2f305a162208a285448
SHA1 hash: f856350b37fae02331ce184b1f258f80900d8de5
MD5 hash: 24a097b3cd1e774e29e6e3e4f5e6522a
humanhash: item-dakota-idaho-bakerloo
File name:Confirming#000092002.exe
Download: download sample
Signature AveMariaRAT
File size:1'320'960 bytes
First seen:2022-03-24 11:04:20 UTC
Last seen:2022-03-24 13:19:20 UTC
File type:Executable exe
MIME type:application/x-dosexec
imphash 5ed77736e49da7d22b203d8d8f918a6b (2 x AveMariaRAT)
ssdeep 6144:aNk8vti3OqUP1bL00RiTwSltgxCKYPMXq9NmiQBYGhpX8x4MWy1FYCz8hJ2n3C+e:Ak8l4D4pa7+ocZ
TLSH T1FC55F964B3E51105E9D7A77F72A08B90C8AE3C419C6DA78F0D464AC6CA3D2F479086F7
Reporter @malwarelabnet
Tags:AveMariaRAT exe limerat warzonerat

Intelligence


File Origin
# of uploads :
2
# of downloads :
217
Origin country :
DE DE
Mail intelligence
No data
Vendor Threat Intelligence
Result
Verdict:
Clean
Maliciousness:
Result
Malware family:
n/a
Score:
  6/10
Tags:
n/a
Behaviour
MalwareBazaar
MeasuringTime
CheckCmdLine
EvasionQueryPerformanceCounter
Verdict:
Suspicious
Threat level:
  5/10
Confidence:
100%
Tags:
greyware
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Result
Threat name:
Unknown
Detection:
malicious
Classification:
n/a
Score:
48 / 100
Signature
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
Threat name:
Win32.Trojan.Lazy
Status:
Malicious
First seen:
2022-03-23 19:29:52 UTC
AV detection:
18 of 42 (42.86%)
Threat level:
  5/5
Gathering data
Unpacked files
SH256 hash:
53e3a344b9dcadc4a23b0fe5776d8e398b7cf5a3d3b99ab181e40b5ac41c972f
MD5 hash:
37b19c5c9080dba0f843ee595dc9acff
SHA1 hash:
ea29d0cc6f457daa582b27ce89765952bd179a8a
Detections:
win_ave_maria_g0 win_ave_maria_auto
SH256 hash:
fc0c90044b94b080f307c16494369a0796ac1d4e74e7912ba79c15cca241801c
MD5 hash:
6b906764a35508a7fd266cdd512e46b1
SHA1 hash:
2a943b5868de4facf52d4f4c1b63f83eacd882a2
SH256 hash:
021d01fe3793879f57a2942664fc7c096710e94e87ad13dc21467c12edf61546
MD5 hash:
ad9fd1564dd1c6be54747e84444b8f55
SHA1 hash:
001495af4af443265200340a08b5e07dc2a32553
SH256 hash:
23cae5cce339ef9de5d22c2117af79d45013d65241fbe6faa7a36e94e191b42b
MD5 hash:
24a097b3cd1e774e29e6e3e4f5e6522a
SHA1 hash:
f856350b37fae02331ce184b1f258f80900d8de5

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments