MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 00dfa85b531cdfc13218279a176dbde185eacf30d1b1776b04b73e1f05e5741f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Intelligence 2 File information 3 Yara Comments

SHA256 hash: 00dfa85b531cdfc13218279a176dbde185eacf30d1b1776b04b73e1f05e5741f
SHA3-384 hash: 790ae7884f694d799dbd0da94cc54e45dee1c5f75bd559934d82d19773aa5a9cdd3d2fee6ac4c9d38c1e77142cb6e73b
SHA1 hash: 6df8204a25923217cd90a2141ee70b68ef4ac68e
MD5 hash: 4359291e0051d51af41b0d598def210d
humanhash: louisiana-pluto-vermont-bluebird
File name:Shipment Document BL,INV and Packing list Attached.zip
Download: download sample
Signature Formbook
File size:278'484 bytes
First seen:2020-06-30 05:42:50 UTC
Last seen:2020-06-30 11:34:30 UTC
File type: zip
MIME type:application/zip
ssdeep 6144:ld8FmaKPzkLbWcHW1tBjS/lXeB3wATHZ/XTsBbB9wu:QoCxHW1TG/luBxHZLEP
TLSH 424423072382F5FA4915C220116010EA8D87D22BE0E518D369F0FEFAD86D7E72FB5997
Reporter @jarumlus
Tags:FormBook

Intelligence


Mail intelligence
Trap location Impact
IT Italy Low
CH Switzerland Low
Global High
# of uploads 2
# of downloads 28
Origin country US US
ClamAV SecuriteInfo.com.Generic-EXE.UNOFFICIAL
CERT.PL MWDB Detection:n/a
Link: https://mwdb.cert.pl/sample/00dfa85b531cdfc13218279a176dbde185eacf30d1b1776b04b73e1f05e5741f/
ReversingLabs :Status:Malicious
Threat name:ByteCode-MSIL.Trojan.Kryptik
First seen:2020-06-30 05:44:05 UTC
AV detection:21 of 31 (67.74%)
Threat level:   5/5
Spamhaus Hash Blocklist :Suspicious file
VirusTotal:No data

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Formbook

zip 00dfa85b531cdfc13218279a176dbde185eacf30d1b1776b04b73e1f05e5741f

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments