MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7f945e1d965b68e1ea68a3e9cd2263dd8b664a5cf618529dda169fb650b6505a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


TaurusStealer


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 7f945e1d965b68e1ea68a3e9cd2263dd8b664a5cf618529dda169fb650b6505a
SHA3-384 hash: a66fd31bc070dabefa844eacbdea966f36962473bc58cb2c0cd135f4742fe949bfcfe72492b6ace9f6b3bd1da746214e
SHA1 hash: 063ff37c1e1a69d0795ada4ea103eab03b4ff3ee
MD5 hash: 10108038254a01b7067db434c9722aec
humanhash: vermont-network-ten-arkansas
File name:INVOICES_BL_AWB_2021.ace
Download: download sample
Signature TaurusStealer
Create hunting rule
File size:245'739 bytes
First seen:2021-01-28 15:53:37 UTC
Last seen:Never
File type: ace
MIME type:application/octet-stream
ssdeep 6144:BxwPm7BmiiYVD7+Hucr7GGxyZ+rexHi+EoDAxb30R7:zBvig7+H1r7PyZ+reVDAxr0Z
TLSH 8034234B5E0945AB1C7D7FA587663912BB3378B20EC1380BB2816175EC4B1CAF06B5BD
Reporter GovCERT_CH

Intelligence

File Origin
# of uploads :
1
# of downloads :
106
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25166.AceHeur.Exe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-exe.UNOFFICIAL
Create hunting rule

Result
Verdict:
MALICIOUS
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/7f945e1d965b68e1ea68a3e9cd2263dd8b664a5cf618529dda169fb650b6505a/
Threat name:
Win32.Infostealer.Fareit
Create hunting rule
Status:
Malicious
First seen:
2021-01-26 15:44:09 UTC
AV detection:
20 of 46 (43.48%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=p6kf4hmwlnuod2tiupu42itd3wfwmss46ymffho2c2p3mufwkbna._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/7f945e1d965b68e1ea68a3e9cd2263dd8b664a5cf618529dda169fb650b6505a

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

TaurusStealer

ace 7f945e1d965b68e1ea68a3e9cd2263dd8b664a5cf618529dda169fb650b6505a

(this sample)

TaurusStealer

Executable exe 4679648337426622a1f44b99207a036144b1e12391c36733eea10f63a02d0304

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 4679648337426622a1f44b99207a036144b1e12391c36733eea10f63a02d0304
  
Dropping
MD5 8ccf9291528b147f1ada20fe94dc822a

Comments