MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3d57334d08deff6d7ba473d4388a4e45abb59ee8ddf96a5be81bdc333330ef57. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

63

Origin country :

DK

File Archive Information

This file archive contains 1 file(s), sorted by their relevance:

Relevant files 1

File name:	SCAN DOC LOI.EXE
File size:	1'531'392 bytes
SHA256 hash:	c32f241ad7caea783e5222e8bf4e556e52433e6944a111026d35cd17e50530b1
MD5 hash:	d202087f6b56891459e5ebc791b3c804
MIME type:	application/x-dosexec
Signature	RemcosRAT

Vendor Threat Intelligence

ACCE Rar_Archive

Details

Link:

https://research.acce.ciphertechsolutions.com/results/8ec2829b-5976-4a91-a3ec-736938b0e85b/

ClamAV Detected

Detection(s):

Sanesecurity.Foxhole.Zip_fn498.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

89.3%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a20db4cf8676ad4d360e411

Tags:

n/a

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

packed

Link:

https://www.filescan.io/uploads/6a210ea4099ef368af1c87af/reports/38a2e9fd-d4fc-4b69-bf97-b7b3702dc92c/overview

Hybrid Analysis Trojan.Packed

Verdict:

Malicious

Labled as:

Trojan.Packed

Link:

https://www.hybrid-analysis.com/sample/3d57334d08deff6d7ba473d4388a4e45abb59ee8ddf96a5be81bdc333330ef57

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

rar

First seen:

2026-06-03T02:20:00Z UTC

Last seen:

2026-06-05T03:46:00Z UTC

Hits:

~100

Link:

https://opentip.kaspersky.com/3d57334d08deff6d7ba473d4388a4e45abb59ee8ddf96a5be81bdc333330ef57/results?tab=lookup

CERT.PL MWDB remcos

Detection:

remcos

Alert

Create hunting rule

Link:

https://mwdb.cert.pl/sample/3d57334d08deff6d7ba473d4388a4e45abb59ee8ddf96a5be81bdc333330ef57/

Neiki Family.REMCOS

Verdict:

Malicious

Threat:

Family.REMCOS

Link:

https://tip.neiki.dev/file/3d57334d08deff6d7ba473d4388a4e45abb59ee8ddf96a5be81bdc333330ef57

ReversingLabs TitaniumCloud Win32.Backdoor.FormBook

Threat name:

Win32.Backdoor.FormBook

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-06-03 07:19:40 UTC

File Type:

Binary (Archive)

Extracted files:

22

AV detection:

22 of 36 (61.11%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=hvltgtii337w265eopkdrcsoiwv3lhxi3x4wuw7idpodgmzq55lq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.45

Link:

https://yomi.yoroi.company/submissions/3d57334d08deff6d7ba473d4388a4e45abb59ee8ddf96a5be81bdc333330ef57

File information

---

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

RemcosRAT

r00 3d57334d08deff6d7ba473d4388a4e45abb59ee8ddf96a5be81bdc333330ef57

(this sample)

any.run

https://app.any.run/tasks/7066b6ec-0367-4b27-ac0a-d3dcf0cddd58

  

Delivery method

Distributed via e-mail attachment