MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 8d9da1d788ebe7f59e20c10e6283757e407a2e3befc63b4df9df138d3277b39c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
AveMariaRAT
Vendor detections: 13
| SHA256 hash: | 8d9da1d788ebe7f59e20c10e6283757e407a2e3befc63b4df9df138d3277b39c |
|---|---|
| SHA3-384 hash: | 435eda2ead2cd1eafbc5b194ddeabca8362781e264c666910c3a372edec0b86199288a3122321963479f3a09355f1248 |
| SHA1 hash: | e7b2c1022dbc3df1142052019d2eca990e4a0cee |
| MD5 hash: | 67c1edd5ba59823b2817a48a8cc5a9e1 |
| humanhash: | blossom-nine-kentucky-spring |
| File name: | 0110199383737338466578282847.scr |
| Download: | download sample |
| Signature | AveMariaRAT |
| File size: | 206'609 bytes |
| First seen: | 2021-02-10 07:08:35 UTC |
| Last seen: | 2021-02-10 09:25:03 UTC |
| File type: | |
| MIME type: | application/x-dosexec |
| imphash | ced282d9b261d1462772017fe2f6972b (127 x Formbook, 113 x GuLoader, 70 x RemcosRAT) |
| ssdeep | 3072:2BkfJpRXATwMdFCc/wVbunAJPa98zWyzm+jzGj0gZMjhtfW8MP20HmKzkeNt:2qjIdUunAJPIoWyzDzGjxZMjGDeBut |
| Threatray | 792 similar samples on MalwareBazaar |
| TLSH | 3114D051A3D8EAAFD3661974CC6D99E97BB4FE0000D00A56778033DF7C3A7A26B16361 |
| Reporter | |
| Tags: | AveMariaRAT RAT scr |
abuse_ch
Malspam distributing AveMariaRAT:HELO: mail.itsaas.pl
Sending IP: 83.143.133.35
From: Lesun Auto Parts Pte Ltd <import@lesunauto.com.sg>
Subject: Enquiry_ Parts GL63, GL450 & GL550-Lesun Auto Parts Pte Ltd
Attachment: 0110199383737338466578282847.cab (contains "0110199383737338466578282847.scr")
AveMariaRAT C2:
xchilogs.duckdns.org:23489 (51.161.61.88)
Intelligence
File Origin
Vendor Threat Intelligence
Result
Behaviour
Result
Details
Result
Signature
Behaviour
Result
Behaviour
Unpacked files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 Signatures
MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.
| Rule name: | AveMaria |
|---|---|
| Author: | @bartblaze |
| Description: | Identifies AveMaria aka WarZone RAT. |
| Rule name: | AveMaria_WarZone |
|---|
| Rule name: | ave_maria_warzone_rat |
|---|---|
| Author: | jeFF0Falltrades |
| Rule name: | Chrome_stealer_bin_mem |
|---|---|
| Author: | James_inthe_box |
| Description: | Chrome in files like avemaria |
| Rule name: | Cobalt_functions |
|---|---|
| Author: | @j0sm1 |
| Description: | Detect functions coded with ROR edi,D; Detect CobaltStrike used by differents groups APT |
| Rule name: | Codoso_Gh0st_1 |
|---|---|
| Author: | Florian Roth |
| Description: | Detects Codoso APT Gh0st Malware |
| Reference: | https://www.proofpoint.com/us/exploring-bergard-old-malware-new-tricks |
| Rule name: | Codoso_Gh0st_2 |
|---|---|
| Author: | Florian Roth |
| Description: | Detects Codoso APT Gh0st Malware |
| Reference: | https://www.proofpoint.com/us/exploring-bergard-old-malware-new-tricks |
| Rule name: | Email_stealer_bin_mem |
|---|---|
| Author: | James_inthe_box |
| Description: | Email in files like avemaria |
| Rule name: | INDICATOR_SUSPICIOUS_Binary_References_Browsers |
|---|---|
| Author: | ditekSHen |
| Description: | Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. |
| Rule name: | MALWARE_Win_AveMaria |
|---|---|
| Author: | ditekSHen |
| Description: | AveMaria variant payload |
| Rule name: | MALWARE_Win_WarzoneRAT |
|---|---|
| Author: | ditekSHen |
| Description: | Detects AveMaria/WarzoneRAT |
| Rule name: | MAL_Envrial_Jan18_1 |
|---|---|
| Author: | Florian Roth |
| Description: | Detects Encrial credential stealer malware |
| Reference: | https://twitter.com/malwrhunterteam/status/953313514629853184 |
| Rule name: | Ping_Del_method_bin_mem |
|---|---|
| Author: | James_inthe_box |
| Description: | cmd ping IP nul del |
| Rule name: | RDPWrap |
|---|---|
| Author: | @bartblaze |
| Description: | Identifies RDP Wrapper, sometimes used by attackers to maintain persistence. |
| Reference: | https://github.com/stascorp/rdpwrap |
| Rule name: | Stealer_word_in_memory |
|---|---|
| Author: | James_inthe_box |
| Description: | The actual word stealer in memory |
| Rule name: | UAC_bypass_bin_mem |
|---|---|
| Author: | James_inthe_box |
| Description: | UAC bypass in files like avemaria |
| Rule name: | win_ave_maria_g0 |
|---|---|
| Author: | Slavo Greminger, SWITCH-CERT |
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.