MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 0297ad27d7b8cecf0c2f1cad25a45246181ccc44c3093b039399102263bce2c5. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
FormBook
Vendor detections: 4
| SHA256 hash: | 0297ad27d7b8cecf0c2f1cad25a45246181ccc44c3093b039399102263bce2c5 |
|---|---|
| SHA3-384 hash: | 29696a45bff359a6af770a5c88c253b307cd423832f330b410ebd866c7d6c138b6e139b8f17b7653275be592410cebd8 |
| SHA1 hash: | e5a6558820685e6a7ed4a0f936d6cc28edeaf9d5 |
| MD5 hash: | ea808d378e36e3093b08eed1c64d16da |
| humanhash: | kilo-april-low-saturn |
| File name: | DHL Shipment Notification Status.zip |
| Download: | download sample |
| Signature | FormBook |
| File size: | 411'909 bytes |
| First seen: | 2020-07-20 04:21:37 UTC |
| Last seen: | 2020-07-24 10:53:11 UTC |
| File type: | zip |
| MIME type: | application/zip |
| ssdeep | 6144:epsSeXpkRNbHvYoRWF1iUfudxrDq+JZN3hvSRJS/xK+zPROZM0J4CIRBQnh8kVj:eSnX2JRWfvfudR3JZRIYhROlERBI/Vj |
| TLSH | 46942307048DF093C56436547EC1ABDDCCC6AE4C9E96A69CF2026F26C6312F266B7B4D |
| Reporter |  jarumlus |
| Tags: | FormBook |
Intelligence
File Origin
# of uploads :
2
# of downloads :
70
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
Win32.Infostealer.Fareit
Status:
Malicious
First seen:
2020-07-19 22:53:02 UTC
AV detection:
24 of 29 (82.76%)
Threat level:
5/5
Detection(s):
Malicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Unknown
Score:
1.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Dropped by
FormBook
Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.