MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 bee94fda12c438ac0dc45e4ec06e8983163fc38ae5870b6d577419c9e7e725b9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


NetWire


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: bee94fda12c438ac0dc45e4ec06e8983163fc38ae5870b6d577419c9e7e725b9
SHA3-384 hash: e1ddcaf442d8b98f804cad86a15ea43b8069c82d21429b8663bf4c385e0c8025872a2225d45b96c3e33e18e126cbce1e
SHA1 hash: 03b4439c73b7b783ba97f17d6c906f2981a04a9d
MD5 hash: acf60e62a140dcf2c7bfb10a3a4beea7
humanhash: magnesium-louisiana-indigo-kansas
File name:Quote Request.img
Download: download sample
Signature NetWire
Create hunting rule
File size:2'228'224 bytes
First seen:2020-11-07 09:57:10 UTC
Last seen:Never
File type: img
MIME type:application/x-iso9660-image
ssdeep 3072:8is4F2zQI5NnCDDRvLGbrOAOkGt6+duWA/t/SHUebbxCbGgKk12qk/oPYm21KLb3:Vs4F2jstvLGyELbMUTKZ
TLSH 66A5EFE071C25F7AC3CA427F30894E3E1DE17DE99692BA58C7F156F7A922BD20B15804
Reporter abuse_ch
Tags:img NetWire


Avatar
abuse_ch
Malspam distributing unidentified malware:

HELO: anacortesmarinesdoc.com
Sending IP: 23.94.177.60
From: Satyendra Pal Singh <info@anacortesmarinesdoc.com>
Subject: Quote Request
Attachment: Quote Request.img (contains "Quote Request.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
98
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.GenericKD.44375732.30801.16982.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/bee94fda12c438ac0dc45e4ec06e8983163fc38ae5870b6d577419c9e7e725b9/
Threat name:
Win32.Packed.Generic
Create hunting rule
Status:
Suspicious
First seen:
2020-11-06 17:00:21 UTC
AV detection:
21 of 48 (43.75%)
Threat level:
  1/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=x3uu7wqsyq4kydoelzhma3ujqmld7q4k4wdqw3kxoqm4tz7hew4q._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

NetWire

img bee94fda12c438ac0dc45e4ec06e8983163fc38ae5870b6d577419c9e7e725b9

(this sample)

NetWire

Executable exe 0df2eaf3f216575fde216ea22e4a56d352d14f78b0fcc3453799bd9563053899

  
Dropping
MD5 f26a1c1ddecc627aa2f4704fcb977304
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 0df2eaf3f216575fde216ea22e4a56d352d14f78b0fcc3453799bd9563053899

Comments