MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a651eb62ed2290751cafff474ce7d5542e2571ba4a273490550b0b40a4588e2c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


HawkEye


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a651eb62ed2290751cafff474ce7d5542e2571ba4a273490550b0b40a4588e2c
SHA3-384 hash: fcf2c5e5f70ad6dee18cbe57ee21d46c7be19b76e5ea21b6e4ade657d357237aab4516df9b1c5afca7879eb830ddb6bd
SHA1 hash: c3583f817db50e2bb49fbd48deed2be1cd6223d6
MD5 hash: ed0cf2a2059d0016f2a48940a7463aef
humanhash: glucose-carolina-arkansas-football
File name:RFQ-MT-JS JIANGYIN-DOCX.gz
Download: download sample
Signature HawkEye
Create hunting rule
File size:296'317 bytes
First seen:2020-06-04 08:07:44 UTC
Last seen:2020-06-04 12:00:05 UTC
File type: zip
MIME type:application/zip
ssdeep 6144:WperyXK9oFpvABZjRR+W9fF0JZD8cUj2RQk3wmeoVW+vDQe:9yXhvW0WhF0vD8cxWk3wm1V/Qe
TLSH 3854235E93785AD45C2F27DB62AAEE79BF20F64CD0352CC4EC851780C9CD4DAA04632B
Reporter jarumlus
Tags:HawkEye

Intelligence

File Origin
# of uploads :
3
# of downloads :
64
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
PUA.Win.Adware.Slugin-6803969-0
Create hunting rule

PUA.Win.Adware.Slugin-6840354-0
Create hunting rule

Gathering data
Threat name:
Win32.Infostealer.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-06-04 08:35:27 UTC
AV detection:
29 of 48 (60.42%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=uzi6wyxnekihkhfp75duzz6vkqxck4n2jittjecvbmfubjcyrywa._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

HawkEye

zip a651eb62ed2290751cafff474ce7d5542e2571ba4a273490550b0b40a4588e2c

(this sample)

HawkEye

Executable exe 6480d0d4232a23159e754ab88769b21a48e8bc4a86fa84b99c2160b2bfb09244

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 6480d0d4232a23159e754ab88769b21a48e8bc4a86fa84b99c2160b2bfb09244
  
Dropping
MD5 de3d218d89e5fe940e9d9ade725f6ef9

Comments