MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 3bea8de6597ee29bd91ad9e377a93ccf62c5ed61e8fefc1964eb041d02400669. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
RemcosRAT
Vendor detections: 4
| SHA256 hash: | 3bea8de6597ee29bd91ad9e377a93ccf62c5ed61e8fefc1964eb041d02400669 |
|---|---|
| SHA3-384 hash: | 76b912020a5be81d69710e9e53c3a153c695fbaccac17059e4f17da228e22e0e689a8251e0995be81d46f00160278714 |
| SHA1 hash: | b996734b5e6eee21db51120b11847a8744bf6e9e |
| MD5 hash: | ef6660b8e6eab5abd3992aff5b480fc9 |
| humanhash: | two-steak-table-robin |
| File name: | Multipack Supplier order 2210018.img |
| Download: | download sample |
| Signature | RemcosRAT |
| File size: | 57'344 bytes |
| First seen: | 2022-10-19 06:42:26 UTC |
| Last seen: | Never |
| File type: | img |
| MIME type: | application/x-iso9660-image |
| ssdeep | 96:5kQzpyXloeMvXkePnwvlbJD+SD5IEdVY6086RzNti6:z4XgPkUwNbpP5rox |
| TLSH | T1194384156398472ADE2247B66CB3B301127FB39149B7D79D39CCA21B6F137912E11BA0 |
| TrID | 99.6% (.NULL) null bytes (2048000/1) 0.2% (.ATN) Photoshop Action (5007/6/1) 0.0% (.BIN/MACBIN) MacBinary 1 (1033/5) 0.0% (.ABR) Adobe PhotoShop Brush (1002/3) 0.0% (.SMT) Memo File Apollo Database Engine (88/84) |
| Reporter |  cocaman |
| Tags: | img RemcosRAT |
cocaman
Malicious email (T1566.001)From: ""Info Multipack" <info.multipack@smartindustries-tr.com>" (likely spoofed)
Received: "from mta1.smartindustries-tr.com (unknown [103.214.7.155]) "
Date: "18 Oct 2022 08:05:19 -0700"
Subject: "[MULTIPACK BVBA] Order N=?UTF-8?B?wrAyMjEwMDE4?="
Attachment: "Multipack Supplier order 2210018.img"
Intelligence
File Origin
# of uploads :
1
# of downloads :
199
Origin country :
n/a
Vendor Threat Intelligence
Verdict:
Malicious
Threat level:
10/10
Confidence:
100%
Tags:
context-iso packed
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Status:
Malicious
First seen:
2022-10-18 13:55:48 UTC
File Type:
Binary (Archive)
Extracted files:
2
AV detection:
16 of 26 (61.54%)
Threat level:
5/5
Detection(s):
Malicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Delivery method
Distributed via e-mail attachment
Dropping
RemcosRAT
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.