MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 b78a2b3b057941f5eb047120600d13bf7ce584981d6babdd52d2011de3e27037. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


NetWire


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: b78a2b3b057941f5eb047120600d13bf7ce584981d6babdd52d2011de3e27037
SHA3-384 hash: 2169cada34d683e87f29292c0be963cc1411c8fb2a4bf5e54ea42e6b891c81e4edd3adebac643cade5c3ad25860ee948
SHA1 hash: 5906dab07337f2e923e6de85021af13bae8b8a87
MD5 hash: d30ca1650cb2adb6d06e2672311df175
humanhash: uncle-magazine-maryland-ten
File name:Bank_details.rar
Download: download sample
Signature NetWire
Create hunting rule
File size:1'755'641 bytes
First seen:2020-07-07 08:43:08 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 49152:FJ0Xf9lmTfd2OFH73/yRJZxdPyCjXY19knt7mv/2m:r0XVlg2OFzsJZxdPjI19VGm
TLSH F485333B77DDBCC516B810316E71EE971CAA70B9393308A7E1114A0E7314BB798A6D93
Reporter abuse_ch
Tags:NetWire rar


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: shbc10.ultina.jp
Sending IP: 218.40.207.10
From: accounts@seagoldlog.com
Subject: Outstanding payment
Attachment: Bank_details.rar (contains "Bank_details.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
171
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/b78a2b3b057941f5eb047120600d13bf7ce584981d6babdd52d2011de3e27037/
Threat name:
Win32.Backdoor.NetWiredRc
Create hunting rule
Status:
Malicious
First seen:
2020-07-07 08:45:05 UTC
AV detection:
28 of 48 (58.33%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=w6fcwoyfpfa7l2yeoeqgaditx56olbeydvv2xxks2iar3y7coa3q._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

NetWire

rar b78a2b3b057941f5eb047120600d13bf7ce584981d6babdd52d2011de3e27037

(this sample)

NetWire

Executable exe a521bd7e14bd3f373c03a13487b5ec4156c9b59bcf7751db5b6fded58d4825d3

  
Dropping
MD5 9b878d9209ed90815bc3bc06a842dd4c
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 a521bd7e14bd3f373c03a13487b5ec4156c9b59bcf7751db5b6fded58d4825d3

Comments