MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f583571ccb563a05415d5fe9dd67b369d9e5e01ce71f113633552a869720867b. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	f583571ccb563a05415d5fe9dd67b369d9e5e01ce71f113633552a869720867b
SHA3-384 hash:	b859a3384626e24cf608109a1602cf8dd8b8009a0f08f21425e7b1c4a895e7e5f917e91d1c3c12f636999aab4d5f8e22
SHA1 hash:	b51cd4fadf685f926dc3faa788840640a660394f
MD5 hash:	f6cd81b5b189dcf08dca8035d4195824
humanhash:	november-skylark-carbon-magnesium
File name:	Outstanding_payment_INV_01290047-01288391.rar
Download:	download sample
Signature	AgentTesla Alert Create hunting rule
File size:	941'108 bytes
First seen:	2026-07-03 17:52:21 UTC
Last seen:	2026-07-03 17:53:35 UTC
File type:	rar
MIME type:	application/x-rar
ssdeep	12288:RDIQgVdefVEVjJSQrtbEOqTmSYkQCJHwO4wG7bsR+aQItgZt7hHLmVIraMQesG/6:12refAJzrtdO+a6mkHy6n6sO
TLSH	T1281533AC82B8E27C7C29FC8539C0D75839F202A64A122DE5AD25DEB49F1467CD0D7B16
TrID	61.5% (.RAR) RAR compressed archive (v5.0) (8000/1) 38.4% (.RAR) RAR compressed archive (gen) (5000/1)
Magika	rar
Reporter	TomU
Tags:	AgentTesla rar

Intelligence

---

File Origin

# of uploads :

4

# of downloads :

50

Origin country :

CH

Vendor Threat Intelligence

ACCE Rar_Archive

Details

Link:

https://research.acce.ciphertechsolutions.com/results/b7fde9f0-a25f-42a9-9932-8b29b7c42b21/

CyberFortress Malicious

Verdict:

Malicious

Score:

99.1%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a47f76d762b0b26f3cf776a

Tags:

virus micro msil

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

formbook masquerade packed

Link:

https://www.filescan.io/uploads/6a47f705a4254f99f84d53e4/reports/d8ebff20-14a4-4e5e-b21a-0a50fce8a4db/overview

Hybrid Analysis Trojan.Generic

Verdict:

Malicious

Labled as:

Trojan.Generic

Link:

https://www.hybrid-analysis.com/sample/f583571ccb563a05415d5fe9dd67b369d9e5e01ce71f113633552a869720867b

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

rar

First seen:

2026-06-15T21:27:00Z UTC

Last seen:

2026-07-02T04:03:00Z UTC

Hits:

~100

Link:

https://opentip.kaspersky.com/f583571ccb563a05415d5fe9dd67b369d9e5e01ce71f113633552a869720867b/results?tab=lookup

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/f583571ccb563a05415d5fe9dd67b369d9e5e01ce71f113633552a869720867b/

ReversingLabs TitaniumCloud ByteCode-MSIL.Backdoor.FormBook

Threat name:

ByteCode-MSIL.Backdoor.FormBook

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-06-16 14:13:00 UTC

File Type:

Binary (Archive)

Extracted files:

12

AV detection:

25 of 36 (69.44%)

Threat level:

  5/5

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/f583571ccb563a05415d5fe9dd67b369d9e5e01ce71f113633552a869720867b