MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 86bc671743c50d7627a7867b44cc2ee6c095f89a6c42677ca8621b4abed5f97d. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


HawkEye


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 86bc671743c50d7627a7867b44cc2ee6c095f89a6c42677ca8621b4abed5f97d
SHA3-384 hash: 273aab0dec3f38e2695807025c9a0c5d7cf02b83d79df99d22aaa24220cb280ac21736f44b686d5dd9ae12fe0cf066bc
SHA1 hash: cc30964a0ef0f3def443558de170fdbc76a1766e
MD5 hash: 92509fc0647a308e6702fc1cc02c523a
humanhash: quiet-eleven-alanine-lactose
File name:Invoice and quotation.img
Download: download sample
Signature HawkEye
Create hunting rule
File size:1'245'184 bytes
First seen:2020-06-19 05:31:50 UTC
Last seen:2020-06-19 10:23:07 UTC
File type: img
MIME type:application/x-iso9660-image
ssdeep 12288:CTXWgSZEgn05KWxwu3ZpMleTOQEMWFlYFkibtHYe9jUC2iN:CTXWgPc9WJ3ZNOQ5Fkime9jX1
TLSH 9445F17470D5825EC86E48314181A4A107F97417DAA36F8AB7ECBAEE1B3BF0046D3D76
Reporter cocaman
Tags:HawkEye img


Avatar
cocaman
Malicious email
From: "Oracle Workflow" <chian242@ms43.hinet.net>
Received: from ms43.hinet.net (unknown [193.142.59.75])
Date: 19 Jun 2020 10:04:08 -0700
Subject: Fw:Payment
Attachment: Proforma paymentHCN Bank.img

Intelligence

File Origin
# of uploads :
2
# of downloads :
66
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.BackDoor.SpyBotNET.17.2060.32367.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-06-19 05:33:05 UTC
File Type:
Binary (Archive)
Extracted files:
16
AV detection:
18 of 31 (58.06%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=q26gof2dyugxmj5hqz5ujtbo43ajl6e2nrbgo7fiminuvpwv7f6q._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

HawkEye

img 86bc671743c50d7627a7867b44cc2ee6c095f89a6c42677ca8621b4abed5f97d

(this sample)

HawkEye

Executable exe 3853c83c0df51ab8dc2d06d29efc8ca581044dbbcfe4c7c4d05fcc0ab62e22a8

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 3853c83c0df51ab8dc2d06d29efc8ca581044dbbcfe4c7c4d05fcc0ab62e22a8
  
Dropping
MD5 10e2d3c8c81501b0b70f6cdf8ea5c872

Comments