MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 b2fb24fcfbec8eacc7210cfba8dae2f1492bfab42efc158a21290578f3af6835. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
FormBook
Vendor detections: 3
| SHA256 hash: | b2fb24fcfbec8eacc7210cfba8dae2f1492bfab42efc158a21290578f3af6835 |
|---|---|
| SHA3-384 hash: | fb2b96e373b3a6fcfc1a8a2b17c9149ae37883adb19b3962b66f54c1235438d8a594644faed1383608a37cad7c85a727 |
| SHA1 hash: | 047bd53899b52de2faf0a44aef4ab2cf57918a7c |
| MD5 hash: | ca018cd6875d145569b0983566a802c6 |
| humanhash: | one-kentucky-idaho-lactose |
| File name: | Garra International - RFQ_GPH_PRODUCTS LIST.z |
| Download: | download sample |
| Signature | FormBook |
| File size: | 349'900 bytes |
| First seen: | 2020-04-15 13:37:41 UTC |
| Last seen: | Never |
| File type: | z |
| MIME type: | application/x-rar |
| ssdeep | 6144:4USnq71Zb4fI5PrcEBzYwV7u9n6qO5GTVk34zLq3llWZsxdI6aW+S1sNqbXVh3HF:4UJ1Zb4fIprcEBzY/E52LG3llWZMI6pL |
| TLSH | BD74232060704A921EF9D196B854E9B4DCB951D92F6403365ACFCEBC0783B4A93B8F7D |
| Reporter |  cocaman |
| Tags: | FormBook z |
Intelligence
File Origin
# of uploads :
1
# of downloads :
78
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
ByteCode-MSIL.Trojan.Kryptik
Status:
Malicious
First seen:
2020-04-15 14:35:39 UTC
File Type:
Binary (Archive)
Extracted files:
9
AV detection:
18 of 45 (40.00%)
Threat level:
2/5
Detection(s):
Malicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.