MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 09631538f6dad33f7a400df7e0338b117c36031df2019576c314ee3e57e5b42f. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
FormBook
Vendor detections: 3
| SHA256 hash: | 09631538f6dad33f7a400df7e0338b117c36031df2019576c314ee3e57e5b42f |
|---|---|
| SHA3-384 hash: | d42019a59dcf0c295078753260b7f53934193a2afa60bb9dd4b698c9598470ec1d6e31cbc7f5d470a3a2d81a311f2f7f |
| SHA1 hash: | 23912578ee29ce30e6fe54a8a5945d2fbdca3e1f |
| MD5 hash: | c9588e5d9db72f846f40635fc3b7bd9e |
| humanhash: | may-michigan-fillet-cup |
| File name: | ArcelorMittal Trading - ARMT#4562198.z |
| Download: | download sample |
| Signature | FormBook |
| File size: | 31'432 bytes |
| First seen: | 2020-03-24 12:16:24 UTC |
| Last seen: | Never |
| File type: | z |
| MIME type: | application/x-rar |
| ssdeep | 768:UZS1JBnLLI3DleMkV+U42yrZh343cW+XdQYbRlpjdU:UZoJ90TDkH4lrZhdW+NzA |
| TLSH | 16E2E1B81A03937FDFFA38165F193D3B123DA48457490148B2D2A1AF035EC57E48A6AC |
| Reporter |  cocaman |
| Tags: | FormBook z |
Intelligence
File Origin
# of uploads :
1
# of downloads :
81
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Noon
Status:
Malicious
First seen:
2020-03-24 14:15:06 UTC
File Type:
Binary (Archive)
Extracted files:
7
AV detection:
23 of 47 (48.94%)
Threat level:
2/5
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.