MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 00dfa85b531cdfc13218279a176dbde185eacf30d1b1776b04b73e1f05e5741f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Formbook
Vendor detections: 3
| SHA256 hash: | 00dfa85b531cdfc13218279a176dbde185eacf30d1b1776b04b73e1f05e5741f |
|---|---|
| SHA3-384 hash: | 790ae7884f694d799dbd0da94cc54e45dee1c5f75bd559934d82d19773aa5a9cdd3d2fee6ac4c9d38c1e77142cb6e73b |
| SHA1 hash: | 6df8204a25923217cd90a2141ee70b68ef4ac68e |
| MD5 hash: | 4359291e0051d51af41b0d598def210d |
| humanhash: | louisiana-pluto-vermont-bluebird |
| File name: | Shipment Document BL,INV and Packing list Attached.zip |
| Download: | download sample |
| Signature | Formbook |
| File size: | 278'484 bytes |
| First seen: | 2020-06-30 05:42:50 UTC |
| Last seen: | 2020-06-30 11:34:30 UTC |
| File type: | zip |
| MIME type: | application/zip |
| ssdeep | 6144:ld8FmaKPzkLbWcHW1tBjS/lXeB3wATHZ/XTsBbB9wu:QoCxHW1TG/luBxHZLEP |
| TLSH | 424423072382F5FA4915C220116010EA8D87D22BE0E518D369F0FEFAD86D7E72FB5997 |
| Reporter |  jarumlus |
| Tags: | FormBook |
Intelligence
File Origin
# of uploads :
2
# of downloads :
68
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Threat name:
ByteCode-MSIL.Backdoor.NanoCore
Status:
Malicious
First seen:
2020-06-30 05:44:05 UTC
AV detection:
22 of 31 (70.97%)
Threat level:
5/5
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.