MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 03194c3877ecab7f35b94abac182ec97df2af899866908c9b71f0bcd59683cb5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 03194c3877ecab7f35b94abac182ec97df2af899866908c9b71f0bcd59683cb5
SHA3-384 hash: da6fff224fae9461c47f40f46b2edbf5faec3ed0ed62b6ad69798d96fcc147c32b8832a591a468539eda4f82a0d16bfa
SHA1 hash: 637565279c15d71fa90fc4248809cee974675555
MD5 hash: afe496bbb8b8d875c20d8e069c1db22f
humanhash: carolina-fillet-robert-summer
File name:invoice copy.scanned-view-intl.zip
Download: download sample
File size:317'989 bytes
First seen:2020-05-07 09:54:55 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 6144:OEqS9eqBDRqMzEIGW2NgMJl4ndZAmt+/cBI38jw06z2WWwtNiqJOB:9qS9LZIPlPl4x0/cBjjw06zrUqJO
TLSH 5C6423A32DAC1B62F977F62DA76B77815EBA4173708C4092933F89C212511E16CAE90C
Reporter jarumlus

Intelligence

File Origin
# of uploads :
1
# of downloads :
79
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.23942.ZipHeur.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.24066.ZipHeur.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.23810.ZipHeur.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.22851.ZipHeur.UNOFFICIAL
Create hunting rule

Sanesecurity.Malware.22964.ZipHeur.UNOFFICIAL
Create hunting rule

Gathering data
Threat name:
Win32.Trojan.Formbook
Create hunting rule
Status:
Malicious
First seen:
2020-05-07 10:35:24 UTC
File Type:
Binary (Archive)
Extracted files:
2
AV detection:
22 of 31 (70.97%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=ammuyodx5svx6nnzjk5mdaxms7psv6ezqzuqrsnxd4f42wlihs2q._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

zip 03194c3877ecab7f35b94abac182ec97df2af899866908c9b71f0bcd59683cb5

(this sample)

Executable exe a0c49ccef1033cbd0119355f93a8109dccf48d53f0fc155e152efaa7ebf44a5a

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 a0c49ccef1033cbd0119355f93a8109dccf48d53f0fc155e152efaa7ebf44a5a
  
Dropping
MD5 28fcf0d7d61f5f19e97e295726fb6fb7

Comments