MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 fbd369835264d0bca284406f4350a2cda50e6b7453a7eb3942e8e9304818f244. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Bancteian


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: fbd369835264d0bca284406f4350a2cda50e6b7453a7eb3942e8e9304818f244
SHA3-384 hash: 36458903b6dfa544d33864ee3304315e72b74649607bc3714d340095924d2531dafacc948141a585dcccb40b165176ea
SHA1 hash: e608e33382ecfdc6ed39bb88a9856128b2eb88a0
MD5 hash: 7ac3e2000de8ed28cfbf226dbe477313
humanhash: neptune-lake-montana-muppet
File name:OUTSTANDING PAYMENT.rar
Download: download sample
Signature Bancteian
Create hunting rule
File size:1'808'687 bytes
First seen:2020-11-03 20:39:37 UTC
Last seen:2020-11-04 14:06:26 UTC
File type: rar
MIME type:application/x-rar
ssdeep 49152:StOubLAY+/CksKzYJa4KEHwf6cpJmxg43xOCq4HtAd:LuAJ9sKzWXqpp4C4wCq4Nw
TLSH 778533037D74998B4CD80067564EDEA500E32CAFB96D4CF1EA2607FDB514DE29B0BE68
Reporter cocaman
Tags:Bancteian rar


Avatar
cocaman
Malicious email (T1566.001)
From: ""prabhu"<seaexp2@lom-logistics.com>"
Received: "from lom-logistics.com (unknown [103.99.1.140]) "
Date: "03 Nov 2020 10:35:31 -0800"
Subject: "OCT MONTH STATEMENT"
Attachment: "OUTSTANDING PAYMENT.rar"

Intelligence

File Origin
# of uploads :
2
# of downloads :
115
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/fbd369835264d0bca284406f4350a2cda50e6b7453a7eb3942e8e9304818f244/
Threat name:
Win32.Trojan.Bancteian
Create hunting rule
Status:
Malicious
First seen:
2020-11-03 20:40:25 UTC
File Type:
Binary (Archive)
Extracted files:
64
AV detection:
18 of 29 (62.07%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=7pjwta2smtilziueibxugufczwsq423ukot6wokc5dutasay6jca._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Bancteian

rar fbd369835264d0bca284406f4350a2cda50e6b7453a7eb3942e8e9304818f244

(this sample)

Bancteian

Executable exe baded1a52a51006d751c63ebecdb3ed8f07590a7773f6a40bb4a62b8f8a09210

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 baded1a52a51006d751c63ebecdb3ed8f07590a7773f6a40bb4a62b8f8a09210
  
Dropping
Bancteian

Comments