MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8330a22dc0d05221740fed56f79e621cff84da4bada55ae28af13d105b0b4d3a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AveMariaRAT


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8330a22dc0d05221740fed56f79e621cff84da4bada55ae28af13d105b0b4d3a
SHA3-384 hash: f46ec45206241ca32a6a0aff39224d3bcdf92351d3dc3fa3eced8f64ba3211191f279dfde50a99f9954c9b72445cc5fe
SHA1 hash: 1253ffad2909a026fc9de3a443ec1eb100bdaa47
MD5 hash: c93b96b4b52694d9964a70dca59a0831
humanhash: hotel-sweet-harry-kilo
File name:INQ-985346.iso
Download: download sample
Signature AveMariaRAT
Create hunting rule
File size:266'240 bytes
First seen:2020-12-04 08:47:27 UTC
Last seen:Never
File type: iso
MIME type:application/x-iso9660-image
ssdeep 3072:3MP7eRyM+kMLdTx67/XOY4zFrdUibCewEsMqfk1ZOobfxAsXDq9m:3MPSd+DLaDwNd7enMqWBpW
TLSH 7944E01C66C0427BC00C1C780AB3D6728EEB6BC4D8B6C65A378D695D1B731B2DAB574A
Reporter cocaman
Tags:AveMariaRAT iso


Avatar
cocaman
Malicious email (T1566.001)
From: "Sprzedes@Salon2kolka.pl" (likely spoofed)
Received: "from serwer.e-aptekarodzinna.pl (serwer.e-aptekarodzinna.pl [51.75.55.73]) "
Date: "04 Dec 2020 03:39:26 -0500"
Subject: "Request For Quotation"
Attachment: "INQ-985346.iso"

Intelligence

File Origin
# of uploads :
1
# of downloads :
158
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Generic.mg.40e702eaa9702c15.23229.UNOFFICIAL
Create hunting rule

Result
Verdict:
MALICIOUS
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/8330a22dc0d05221740fed56f79e621cff84da4bada55ae28af13d105b0b4d3a/
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=qmykeloa2bjcc5ap5vlpphtcdt7yjwslvwsvvyuk6e6rawylju5a._file
Malware family:
Warzone
Create hunting rule
Verdict:
Malicious
Link:
https://www.vmray.com/analyses/_mb/8330a22dc0d0/report/overview.html
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/8330a22dc0d05221740fed56f79e621cff84da4bada55ae28af13d105b0b4d3a

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AveMariaRAT

iso 8330a22dc0d05221740fed56f79e621cff84da4bada55ae28af13d105b0b4d3a

(this sample)

AveMariaRAT

Executable exe e092e65f8deb9ad553bfd53c0d46608c6f41850f0b5398e87a6a68dab7fd3bbb

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 e092e65f8deb9ad553bfd53c0d46608c6f41850f0b5398e87a6a68dab7fd3bbb

Comments