MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 6e890201250196d3cff434adb49b951b2b7b03d2f30ddc01276f6e083fadcfe7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
AveMariaRAT
Vendor detections: 3
| SHA256 hash: | 6e890201250196d3cff434adb49b951b2b7b03d2f30ddc01276f6e083fadcfe7 |
|---|---|
| SHA3-384 hash: | 9cd8abcf3e4c4da0267dfbd7c466311e9e99e75424b7cd8562402a506b876f1ed602c5bff6dd58c73ee0335ac92f6485 |
| SHA1 hash: | 50b8eaec8436364fdee720a3764564d2245b2e5a |
| MD5 hash: | 69e07d14f75db7b235cd694d1d98520a |
| humanhash: | maryland-alaska-ohio-mountain |
| File name: | New list 8576843.zip |
| Download: | download sample |
| Signature | AveMariaRAT |
| File size: | 333'293 bytes |
| First seen: | 2020-10-20 08:28:55 UTC |
| Last seen: | Never |
| File type: | zip |
| MIME type: | application/zip |
| ssdeep | 6144:p8UCvIRjoOB17upCW1GM8v/bWrhE71TexggfffBhYb77FTfcBdZpday6EYzg+T/q:pqIRNk5158v/KrhIixggfXCdTk/VazKl |
| TLSH | 39642307CD19428346C5A9126E05D1CFE7FED00CBBB23561C992DA9285F0FB0A6EFE59 |
| Reporter |  abuse_ch |
| Tags: | AveMariaRAT RAT zip |
abuse_ch
Malspam distributing AveMariaRAT:HELO: hwhk97-251.mailset.cn
Sending IP: 23.91.97.251
From: ZhengJoan <joan@ever-growing.net>
Subject: New list # 8576843
Attachment: New list 8576843.zip (contains "New list # 8576843.exe")
Intelligence
File Origin
# of uploads :
1
# of downloads :
63
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Malicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Dropping
AveMariaRAT
Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.