MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 340a2947b74a3096876dfb185c8677cb068088ea1838dd1a0aa69afccc1eb821. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	340a2947b74a3096876dfb185c8677cb068088ea1838dd1a0aa69afccc1eb821
SHA3-384 hash:	2d08c3258943bbf9b3e2a9a346e6e6159403b85eb492994d3d62737b4e768957de4363f61d69acce83bba75f210806f7
SHA1 hash:	5fc386a46feea42fa4e15244e641285dd01f6e9a
MD5 hash:	71f7a0bbab34b022b1f635459a3f7502
humanhash:	asparagus-kansas-alaska-maine
File name:	bestthingsofbuttersmooththings.gIF
Download:	download sample
File size:	566'456 bytes
First seen:	2024-07-31 02:48:19 UTC
Last seen:	Never
File type:	unknown
MIME type:	text/plain
ssdeep	3072:tHGWwfyYFPhNe4VTdRnTT8w4TWVTqAdeGQg/5p1Wgg1S7jc3uBCT4hO39jE1iM:TwfyYF7Tq6
TLSH	T115C4022256E86144B2F33F217EF911E58F37BAE5AD7AC1AC218C161D4BA3A40CD61773
TrID	66.6% (.TXT) Text - UTF-16 (LE) encoded (2000/1) 33.3% (.MP3) MP3 audio (1000/1)
Reporter	nickkuechel
Tags:	remcos

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

118

Origin country :

US

Vendor Threat Intelligence

Hybrid Analysis JS/Agent.CKS

Verdict:

Suspicious

Labled as:

JS/Agent.CKS

Link:

https://www.hybrid-analysis.com/sample/340a2947b74a3096876dfb185c8677cb068088ea1838dd1a0aa69afccc1eb821

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

SCRIPT

Link:

https://malprob.io/report/340a2947b74a3096876dfb185c8677cb068088ea1838dd1a0aa69afccc1eb821

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/340a2947b74a3096876dfb185c8677cb068088ea1838dd1a0aa69afccc1eb821/

ReversingLabs TitaniumCloud Script-WScript.Trojan.Remcos

Threat name:

Script-WScript.Trojan.Remcos

Alert

Create hunting rule

Status:

Malicious

First seen:

2024-07-29 16:40:56 UTC

File Type:

Text (VBS)

AV detection:

9 of 24 (37.50%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=gqfcsr5xjiyjnb3n7mmfzbtxzmdibchkda4n2gqku2npzta6xaqq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.05

Link:

https://yomi.yoroi.company/submissions/340a2947b74a3096876dfb185c8677cb068088ea1838dd1a0aa69afccc1eb821