MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a20c74ab95ae0ce28236ff96951768fc839722d055556eed9a3f431ef9680235. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a20c74ab95ae0ce28236ff96951768fc839722d055556eed9a3f431ef9680235
SHA3-384 hash: 3c1500585a142279b75e510f0260fda9b0efefb5f313dc6e7f0c8e026faf0a63b60525eed1281598e4b4865824bd0f9f
SHA1 hash: b43dcfe8fa98aeb755a81580740c210e46353359
MD5 hash: 167dcdf00ac2bc4d1964c908eda41728
humanhash: one-snake-ink-hot
File name:PO #0471309 Maysville.gz
Download: download sample
File size:234'974 bytes
First seen:2020-07-09 11:34:00 UTC
Last seen:Never
File type: gz
MIME type:application/x-rar
ssdeep 6144:u7Gv+vDbO2TWWyXZCycnEK8Kl7phQZ6Is6a3r:t+vmKFyI9T52Zds6I
TLSH 6D34237BA210477360D32AF54C1171079A3FC360F917A9550BC769CE7938AAB12DC6EB
Reporter cocaman
Tags:gz


Avatar
cocaman
Malicious email
From: Mohd Mukhriz Ramli (MLNG/GNE) <mukhriz@maysville.com.my>
Received: from maysville.com.my (static.235.246.202.116.clients.your-server.de [116.202.246.235])
Date: 09 Jul 2020 02:42:39 -0700
Subject: PO #:0471309
Attachment: PO #0471309 Maysville.gz

Intelligence

File Origin
# of uploads :
1
# of downloads :
67
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/a20c74ab95ae0ce28236ff96951768fc839722d055556eed9a3f431ef9680235/
Threat name:
Win32.Infostealer.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-07-09 10:35:33 UTC
File Type:
Binary (Archive)
Extracted files:
59
AV detection:
17 of 29 (58.62%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=uighjk4vvygofarw76ljkf3i7sbzoiwqkvkw53m2h5br56liai2q._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

gz a20c74ab95ae0ce28236ff96951768fc839722d055556eed9a3f431ef9680235

(this sample)

Executable exe d5428c33e4529ecf6c9c4b338a65c7f9d990f956744da9a8089d6b9a0156f9f9

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 d5428c33e4529ecf6c9c4b338a65c7f9d990f956744da9a8089d6b9a0156f9f9

Comments