MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b347f5b87997ace2f2f4fa815239eb649ee112926477392a1328cb50ceae30d9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


AveMariaRAT


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: b347f5b87997ace2f2f4fa815239eb649ee112926477392a1328cb50ceae30d9
SHA3-384 hash: 50eaa7f669e232496ed842bae52c2ab019bb1799a406fb0bea51fab69c1f03729971df102f6dd0faf25041338d0d0a95
SHA1 hash: 316fe11e1d3e1f3de40d0ea42150e8e5190ee477
MD5 hash: 5391f7702e5661ecf6d376cd3347832c
humanhash: bluebird-network-zulu-cold
File name:PAYMENT ADVICE - Nilai Bekal.img
Download: download sample
Signature AveMariaRAT
Create hunting rule
File size:1'507'328 bytes
First seen:2021-09-27 05:06:18 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 24576:+vYtIFjF+tXIHgvBWJK7E3fNK0If6H2P8:AYtIFjyXyqBWgg1K0K
TLSH T18765DF08626C9B4DC5BF83FAB05305180772E90B3E4DD606AEC671E81FB5BB14A579CB
Reporter fabjer
Tags:AveMariaRAT img

Intelligence

File Origin
# of uploads :
1
# of downloads :
133
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.W32.MSIL_Kryptik.FRB.genEldorado.9818.26055.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/b347f5b87997ace2f2f4fa815239eb649ee112926477392a1328cb50ceae30d9/
Threat name:
ByteCode-MSIL.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2021-09-27 02:55:13 UTC
AV detection:
5 of 45 (11.11%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=wnd7lodzs6wof4xu7kaveoplmspoceusmr3tskqtfdfvbtvogdmq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/b347f5b87997ace2f2f4fa815239eb649ee112926477392a1328cb50ceae30d9

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

AveMariaRAT

img b347f5b87997ace2f2f4fa815239eb649ee112926477392a1328cb50ceae30d9

(this sample)

AveMariaRAT

Executable exe e7d8fdb8b148a829301e8f5aa5e6f158149a3f145c695f93abe26f81d6eb99e8

  
Dropping
SHA256 e7d8fdb8b148a829301e8f5aa5e6f158149a3f145c695f93abe26f81d6eb99e8
  
Delivery method
Distributed via e-mail attachment

Comments