MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 55d755e1a5dd3b4975a8806527e60eedd6a2fe9d16500c8890e1a87feaae15dc. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 6
| SHA256 hash: | 55d755e1a5dd3b4975a8806527e60eedd6a2fe9d16500c8890e1a87feaae15dc |
|---|---|
| SHA3-384 hash: | a771bec3531c0aa00e00872203d1bdbd65cd116ba41baa83d3852de861ce7ce735932897d98574d5afb8a5ed6b86a161 |
| SHA1 hash: | 040847e724415d72411e308b336bed86ea7f9f5c |
| MD5 hash: | 57472ab7477ba94102e939cf2727f354 |
| humanhash: | eighteen-bravo-stream-comet |
| File name: | 57472ab7477ba94102e939cf2727f354.exe |
| Download: | download sample |
| File size: | 1'373'881 bytes |
| First seen: | 2022-02-13 16:57:42 UTC |
| Last seen: | 2022-02-13 18:51:35 UTC |
| File type: |  exe |
| MIME type: | application/x-dosexec |
| imphash | a77b62e7744be75f9ed37f206579d5d4 (1 x AveMariaRAT) |
| ssdeep | 6144:ryKO3IOd2M6RXZ8qMkqmg5l24abQ/KH+LhTiRhWWJqrXXN90mZ7mCxdBnc2tTnek:OYOdvUZwkqmg5TabQyTydNNAF4B0la |
| TLSH | T181553B64A3A11115E997A7BF72B08B90C4BE3C405D6D93CF4E464AC6CA2E3F479086F7 |
| Reporter |  abuse_ch |
| Tags: | exe |
Intelligence
File Origin
# of uploads :
2
# of downloads :
272
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Result
Verdict:
Malware
Maliciousness:
Gathering data
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Malware family:
Generic Malware
Verdict:
Malicious
Result
Threat name:
Unknown
Detection:
malicious
Classification:
n/a
Score:
48 / 100
Signature
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
Threat name:
Win32.Trojan.AveMariaRat
Status:
Malicious
First seen:
2022-02-13 04:33:17 UTC
File Type:
PE (Exe)
AV detection:
21 of 43 (48.84%)
Threat level:
5/5
Unpacked files
SH256 hash:
55d755e1a5dd3b4975a8806527e60eedd6a2fe9d16500c8890e1a87feaae15dc
MD5 hash:
57472ab7477ba94102e939cf2727f354
SHA1 hash:
040847e724415d72411e308b336bed86ea7f9f5c
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
exe 55d755e1a5dd3b4975a8806527e60eedd6a2fe9d16500c8890e1a87feaae15dc
(this sample)
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.