MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e03b950e1520ae179435f77f4236c9816848dc6ac90dfe6b1f3a66a6a08d2fd5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



ZLoader


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments

SHA256 hash: e03b950e1520ae179435f77f4236c9816848dc6ac90dfe6b1f3a66a6a08d2fd5
SHA3-384 hash: 3522f6a0123ae48639d923ea6420a20eeecac51ab298aed0d5e8ef9809f37983f84aaa0086c664a2f3986cbae8fbc08f
SHA1 hash: 239718125d50b38bb4775ad50efdbe0fde672c29
MD5 hash: 52eaaecf9b30617011b80b8b75eb48c2
humanhash: social-beryllium-sink-delta
File name:3254_33723_cqexc.vbs
Download: download sample
Signature ZLoader
File size:710'815 bytes
First seen:2020-07-02 20:20:09 UTC
Last seen:Never
File type:Visual Basic Script (vbs) vbs
MIME type:text/plain
ssdeep 6144:BSmqbkuM6REu+LayCcJeX8ju3klN/INKQJIfj33NNf2YfXo:BX/DuN+PjlN/VyIfruYf4
TLSH 30E4CB1207560679F99D0EC1D89F1D9675F6C912BE5C2618AB332DE3BC3B9DC803632A
Reporter Racco42
Tags:vbs

Intelligence


File Origin
# of uploads :
1
# of downloads :
100
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
Script-VBS.Downloader.Donoff
Status:
Malicious
First seen:
2020-07-02 20:22:06 UTC
AV detection:
13 of 48 (27.08%)
Threat level:
  3/5
Result
Malware family:
n/a
Score:
  7/10
Tags:
n/a
Behaviour
Deletes itself
Deletes itself
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

ZLoader

Visual Basic Script (vbs) vbs e03b950e1520ae179435f77f4236c9816848dc6ac90dfe6b1f3a66a6a08d2fd5

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments