MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 6763c992f5293b2e3c821ea6159692e7ba0ece26c6fb372dd1481f2b253effe1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Bancteian


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 6763c992f5293b2e3c821ea6159692e7ba0ece26c6fb372dd1481f2b253effe1
SHA3-384 hash: 4901f7fa48d461287e01a56221e39cbe0c3981ddf1a9dfb50fed177736034bf3df6aa2cc2ff3facd9610b32eee810931
SHA1 hash: a87dd3bfc7384c0bc30d4e0766d4dc6f27a5f9b8
MD5 hash: 292cd96aafea2d4f4f0ef0c4a47d96bb
humanhash: music-virginia-lithium-oscar
File name:DKC-20-10-10112.rar
Download: download sample
Signature Bancteian
Create hunting rule
File size:2'028'660 bytes
First seen:2020-10-30 06:14:59 UTC
Last seen:2020-10-30 07:43:43 UTC
File type: rar
MIME type:application/x-rar
ssdeep 49152:rtOubLAY+/CksKzYJa4KEHwf6cpJm4+Xejp1odWhAr:8uAJ9sKzWXqpp4pejpGdHr
TLSH AF9533D3BFEC8AA6E4E721A7572E8B7A21A71CFB047C1C51565402FB3805CD06BCB856
Reporter cocaman
Tags:Bancteian rar


Avatar
cocaman
Malicious email (T1566.001)
From: ""ken.chin"<ken.chin@dlkfan.com"
Received: "from dlkfan.com (unknown [103.99.1.140]) "
Date: "29 Oct 2020 20:28:56 -0700"
Subject: "REVICED ORDER FOR DKC-20-10-10112"
Attachment: "DKC-20-10-10112.rar"

Intelligence

File Origin
# of uploads :
2
# of downloads :
92
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/6763c992f5293b2e3c821ea6159692e7ba0ece26c6fb372dd1481f2b253effe1/
Threat name:
Win32.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-10-30 03:45:22 UTC
File Type:
Binary (Archive)
Extracted files:
65
AV detection:
17 of 29 (58.62%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=m5r4texvfe5s4pecd2tblfus465a5trgy35tolorjapswjj677qq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Bancteian

rar 6763c992f5293b2e3c821ea6159692e7ba0ece26c6fb372dd1481f2b253effe1

(this sample)

Bancteian

Executable exe e582696b2f3c980a6d81be401fc5da4c24a4b0c490ff6764516a0aa3e3aae23b

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 e582696b2f3c980a6d81be401fc5da4c24a4b0c490ff6764516a0aa3e3aae23b

Comments