MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 007d92550421bc96492e77134c99d3c13e412bd6d574c6cef374f31a1683299a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Formbook
Vendor detections: 5
| SHA256 hash: | 007d92550421bc96492e77134c99d3c13e412bd6d574c6cef374f31a1683299a |
|---|---|
| SHA3-384 hash: | f8b0f88ed45151bc762ffe245db9d8057dfdea7be48561ae6759453506164dc78e780d389eee957072082498d5a7f24f |
| SHA1 hash: | f544dd20940286dcd62c3a6e215b76b2c0d41911 |
| MD5 hash: | f2b3b1f8b907032efe5255a5d8d187f9 |
| humanhash: | quebec-shade-comet-fix |
| File name: | PaymentInvoice.cab |
| Download: | download sample |
| Signature | Formbook |
| File size: | 292'628 bytes |
| First seen: | 2021-03-30 11:12:38 UTC |
| Last seen: | Never |
| File type: | cab |
| MIME type: | application/vnd.ms-cab-compressed |
| ssdeep | 6144:nvkpFPnsThiLeAqnps0G6DMK/6fztVkAnmCvl9T+1jjAhki+3rj3NCI6c:ncpoiLeznps0LDMamtVVnmolEBjCk1rH |
| TLSH | 1454234F9E14BBC2B102AC955619FD81B4408EFA2354C8A22E2E190EEDF171F753D6DB |
| Reporter |  fabjer |
| Tags: | cab |
Intelligence
File Origin
# of uploads :
1
# of downloads :
111
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Result
Verdict:
MALICIOUS
Threat name:
Win32.Trojan.SpyNoon
Status:
Malicious
First seen:
2021-03-30 09:55:20 UTC
AV detection:
7 of 48 (14.58%)
Threat level:
5/5
Detection(s):
Malicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.