MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 55d204e6162e7cafad6a81404a2cad5c6da3c38b486c2609b04f80eadd09efb2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Formbook
Vendor detections: 2
| SHA256 hash: | 55d204e6162e7cafad6a81404a2cad5c6da3c38b486c2609b04f80eadd09efb2 |
|---|---|
| SHA3-384 hash: | 8ab3dabbf2e40aa44e360684155abe4403f230c396f7109c05d1856fd85b404320f17e007e28eac3ada54b11a7916b37 |
| SHA1 hash: | 11b2ad7a45356c30f629616016c569faadafaeeb |
| MD5 hash: | 978cde6870983f0eb3ba408ca8e858a0 |
| humanhash: | missouri-monkey-mississippi-burger |
| File name: | yeni sipariş.zip |
| Download: | download sample |
| Signature | Formbook |
| File size: | 499'989 bytes |
| First seen: | 2020-10-16 12:57:16 UTC |
| Last seen: | Never |
| File type: | zip |
| MIME type: | application/zip |
| ssdeep | 12288:kn8ohvOFpuwLH+4vBS9pceOrDD/IG5cGiQBZwrPab0f3VCvx:k8ohOuwLe4NjpXt35b0fux |
| TLSH | 5EB423B35BFE095F4C07FC116CCD9E688B87A6558C6B8F4A18811A87D6E4C94F703BA1 |
| Reporter |  abuse_ch |
| Tags: | FormBook geo TUR zip |
abuse_ch
Malspam distributing unidentified malware:HELO: host2.himbimarket.com
Sending IP: 72.52.244.66
From: SEVİL GÜNAYDIN <export@icskompresor.com.tr>
Subject: Re: Re: yeni sipariş
Attachment: yeni sipariş.zip (contains "yeni sipariş.exe")
Intelligence
File Origin
# of uploads :
1
# of downloads :
78
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.