MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a66fcb52004ea8934a91897e46359b23d3ce6efe46df887ea919aff51ebaf99b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a66fcb52004ea8934a91897e46359b23d3ce6efe46df887ea919aff51ebaf99b
SHA3-384 hash: 228a1fa658b4c5d61807ba5c02779b08f6b6cd4d1ad1d6c3b64bf5df8a3f5107c6792e7cdc058b9a05d733bca01002d4
SHA1 hash: 9e41d4ff93d6392f1c9924cea600a37e6931be95
MD5 hash: bc28a82654821ef7a02a8b86d4506c20
humanhash: charlie-uniform-twelve-connecticut
File name:Bank Details.rar
Download: download sample
File size:149'546 bytes
First seen:2020-11-27 08:22:33 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 3072:xyoTKV9k1xSGKsOcoKVbZAIz11ys6y+wbHS7gTBt88SdlG18y0472:4XV9mroKVbtJ1DbHScTBt88Sdgf0472
TLSH 14E312522A33369FF20F9C99AB5EF1E8471D535B6322014835A84946BFCF647123E1FA
Reporter cocaman
Tags:rar


Avatar
cocaman
Malicious email (T1566.001)
From: ""Grace Chu" <lbenson@phoenixtextile.com>" (likely spoofed)
Received: "from phoenixtextile.com (unknown [37.49.225.134]) "
Date: "27 Nov 2020 08:53:45 +0100"
Subject: "RE: PAYMENT TO BANK DETAILS (CONFIRM BANK DETAILS)"
Attachment: "Bank Details.rar"

Intelligence

File Origin
# of uploads :
1
# of downloads :
91
Origin country :
n/a
Vendor Threat Intelligence
Result
Gathering data
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/a66fcb52004ea8934a91897e46359b23d3ce6efe46df887ea919aff51ebaf99b/
Threat name:
ByteCode-MSIL.Infostealer.Maslog
Create hunting rule
Status:
Malicious
First seen:
2020-11-27 08:23:04 UTC
File Type:
Binary (Archive)
Extracted files:
2
AV detection:
12 of 47 (25.53%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=uzx4wuqaj2ujgsurrf7emnm3epj443x6i3pyq7vjdgx7khv27gnq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
Link:
https://yomi.yoroi.company/submissions/a66fcb52004ea8934a91897e46359b23d3ce6efe46df887ea919aff51ebaf99b

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

rar a66fcb52004ea8934a91897e46359b23d3ce6efe46df887ea919aff51ebaf99b

(this sample)

Executable exe 96bed9c453b26eee99a3e50cf3ec45332d982bf9b9b5099bd4e7d365afd614f7

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 96bed9c453b26eee99a3e50cf3ec45332d982bf9b9b5099bd4e7d365afd614f7

Comments