MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 fa3b00639b88f15e83071f4e61c90e5c8fb1ec1bdac53374444263abe92a7d15. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
RemcosRAT
Vendor detections: 3
| SHA256 hash: | fa3b00639b88f15e83071f4e61c90e5c8fb1ec1bdac53374444263abe92a7d15 |
|---|---|
| SHA3-384 hash: | 604fc7ee9cf26a721462064417c0b1090f3861c5a7112bab0b22613ba9bd6f0b0a4f6f8ceb2a3a4eecbe9b4c17272a33 |
| SHA1 hash: | faed8c686f2e22e40f6b5a6508abd2b14a7d7eff |
| MD5 hash: | 3b0e8add92c15b4055e2561ce4120429 |
| humanhash: | california-dakota-monkey-ink |
| File name: | SCN-PV21-00920 P NEW ORDER.r10 |
| Download: | download sample |
| Signature | RemcosRAT |
| File size: | 542'854 bytes |
| First seen: | 2021-03-24 16:59:28 UTC |
| Last seen: | 2021-03-25 06:22:57 UTC |
| File type: | rar |
| MIME type: | application/x-rar |
| ssdeep | 12288:5nNNCz0UA0QfqexUjeNAl17dWfVvlrleV0BLlBQi+t5m/QzVqj0OrIs:5nHCwU2qqKDQfPrJfBx+t5moRqjv8s |
| TLSH | 90B423247CF46E30DE69B881273EF9352AE3C475AD16E0B20B43F2DB25925337D80A61 |
| Reporter |  lowmal3 |
Intelligence
File Origin
# of uploads :
2
# of downloads :
97
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Result
Verdict:
UNKNOWN
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Detection(s):
Malicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Eldorado
Score:
0.90
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.