MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 93324881ad10020a8e8acf86d20264ceb3fbd16318249d5710e90e68bf03b1eb. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AveMariaRAT


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 93324881ad10020a8e8acf86d20264ceb3fbd16318249d5710e90e68bf03b1eb
SHA3-384 hash: 7989d608973e8e46f119814e4545435a293f25c5e1eeedf7b13c1e07b0aa67b412183b2007f0dd9f89470717f7469764
SHA1 hash: 7e54dbd5e8369f9e5aaedf61f70702307dbcb08c
MD5 hash: d9b67899f9b0a232dfd21f16149653fb
humanhash: texas-earth-aspen-lima
File name:HSBC-110419.iso
Download: download sample
Signature AveMariaRAT
Create hunting rule
File size:344'064 bytes
First seen:2020-10-16 12:55:15 UTC
Last seen:Never
File type: iso
MIME type:application/x-iso9660-image
ssdeep 3072:Fa3cpJM0+Em/mEv0idmswvkIohbc/Wf/i9xuxm1zZ+sWVsxgHstythSyKz0HwmAO:ocn+Em/mU2ZfyivT
TLSH 88747E12F1C46632F97F743A11BB14F15F22BCA23E6BA66F9D2262232D50F457F1A805
Reporter abuse_ch
Tags:AveMariaRAT geo HSBC iso MKD


Avatar
abuse_ch
Malspam distributing unidentified malware:

From: Komercijalna banka Skopje <account@ptssyndicate.com>
Subject: Известување за дојдовна исплата
Attachment: HSBC-110419.iso (contains "HSBC-110419.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
66
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/93324881ad10020a8e8acf86d20264ceb3fbd16318249d5710e90e68bf03b1eb/
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=smzeranncabavdukz6dneatez2z7xulddasj2vyq5ehgrpydwhvq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/93324881ad10020a8e8acf86d20264ceb3fbd16318249d5710e90e68bf03b1eb

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AveMariaRAT

iso 93324881ad10020a8e8acf86d20264ceb3fbd16318249d5710e90e68bf03b1eb

(this sample)

AveMariaRAT

Executable exe 5c14aee239971a12f6f9ac50cce4c9ecaca4639c10688ca050f9ce661569ac25

  
Dropping
MD5 edbc2b40dca36d54c8e463d5812dbe1f
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 5c14aee239971a12f6f9ac50cce4c9ecaca4639c10688ca050f9ce661569ac25

Comments