MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b76d5451dd01a49fcbfb64219dfe592d392783ddb4efeb1b2a5f5dcc36ef5d30. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	b76d5451dd01a49fcbfb64219dfe592d392783ddb4efeb1b2a5f5dcc36ef5d30
SHA3-384 hash:	01cfa15e8c2671f8b12f7faee825446cf5e16994bf5a4de524c78d9a00f5ccc9dd1e62d927090ccb78d381d23595651c
SHA1 hash:	82c1e66e48267e8a4559d6fd34e07c868001c930
MD5 hash:	7d279c2887ac75e06a6a5ae1ae392f18
humanhash:	east-illinois-venus-friend
File name:	Requirement_document_2026010711864779153.rar
Download:	download sample
Signature	RemcosRAT Alert Create hunting rule
File size:	181'504 bytes
First seen:	2026-07-03 18:02:28 UTC
Last seen:	2026-07-03 18:03:48 UTC
File type:	rar
MIME type:	application/x-rar
ssdeep	3072:teMtkBLfnKkakpMvDqgcx28hqefOWmDxv7LCNLJIq898j07GDOZgl:AxKNkpMvDR89fmDdeNV7898j07fZk
TLSH	T1CB0412505FA603A5DA012A8F63E5F6BD3814D41AD1CDB93C182AF0AE11B403FD762AD7
TrID	61.5% (.RAR) RAR compressed archive (v5.0) (8000/1) 38.4% (.RAR) RAR compressed archive (gen) (5000/1)
Magika	rar
Reporter	TomU
Tags:	rar RemcosRAT

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

51

Origin country :

CH

Vendor Threat Intelligence

ACCE Rar_Archive

Details

Link:

https://research.acce.ciphertechsolutions.com/results/3258cf6e-8483-4735-9fbc-a564ac2380db/

ClamAV Detected

Detection(s):

SecuriteInfo.com.VBS.Agent-107.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a47fa2f32952f8351cf71f1

Tags:

cobalt shell sage remo

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

downloader

Link:

https://www.filescan.io/uploads/6a47f9cc3ffd795b792d05db/reports/acb198e8-e3dc-4c87-831e-d0438cc33503/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/b76d5451dd01a49fcbfb64219dfe592d392783ddb4efeb1b2a5f5dcc36ef5d30

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

Rar

First seen:

2026-07-01T23:50:00Z UTC

Last seen:

2026-07-03T14:49:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/b76d5451dd01a49fcbfb64219dfe592d392783ddb4efeb1b2a5f5dcc36ef5d30/results?tab=lookup

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/b76d5451dd01a49fcbfb64219dfe592d392783ddb4efeb1b2a5f5dcc36ef5d30/

ReversingLabs TitaniumCloud Script-WScript.Trojan.Heuristic

Threat name:

Script-WScript.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-07-03 18:14:27 UTC

File Type:

Binary (Archive)

Extracted files:

1

AV detection:

7 of 36 (19.44%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=w5wviuo5agsj7s73mqqz37szfu4spa65wtx6wgzkl5o4ynxpluya._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.33

Link:

https://yomi.yoroi.company/submissions/b76d5451dd01a49fcbfb64219dfe592d392783ddb4efeb1b2a5f5dcc36ef5d30