MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e448a98bba71892481638c2105a88b00880cc7199ae14ac3a30ede8f40d81e36. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



RemcosRAT


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: e448a98bba71892481638c2105a88b00880cc7199ae14ac3a30ede8f40d81e36
SHA3-384 hash: df2b2acf915de3a66ecde700b869142276212c9b9ab36947e2c844f0a44a49a712b71be9ed23e4c205d4c2fc66f454c1
SHA1 hash: 86508f521b2840a96d7e94f0a915ecb169c667ce
MD5 hash: cf173105669d85074b272677440ea0f2
humanhash: uranus-jersey-oscar-four
File name:kart bilgisi.pdf.rar
Download: download sample
Signature RemcosRAT
File size:9'835 bytes
First seen:2021-01-18 07:51:12 UTC
Last seen:2021-01-18 08:04:30 UTC
File type: zip
MIME type:application/zip
ssdeep 192:o4HAb6TbhdFcA8fOcSI4cvxHzEJ91l5uMMft:XHAebGjV4qxIJ/GVt
TLSH 4C12C03F8E6DD47ADD6B09AE0C167828CF44ACD117D58A1B055394FC96068C80CD868D
Reporter lowmal3

Intelligence


File Origin
# of uploads :
2
# of downloads :
92
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
Win32.Trojan.Generic
Status:
Suspicious
First seen:
2021-01-18 07:52:09 UTC
AV detection:
3 of 46 (6.52%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

RemcosRAT

zip e448a98bba71892481638c2105a88b00880cc7199ae14ac3a30ede8f40d81e36

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments