MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 78dbc02966ef38d387bbab8157a0a22595080f8f25f8efeef768bb82bf37f32e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments

SHA256 hash: 78dbc02966ef38d387bbab8157a0a22595080f8f25f8efeef768bb82bf37f32e
SHA3-384 hash: ee35ecc9acc0716e95df41658f7d5c1ba779819943364c2dfeab0f250116adc10815e02d81cd5ad35ca2432b9ebe265f
SHA1 hash: fde2f4d46670d258daf0a7f69e28afc21e1807dc
MD5 hash: fa2bdef9a962adc127979970fe021797
humanhash: cola-iowa-september-whiskey
File name:3a551e41-1d69-4187-99db-ad5504452287.vbs
Download: download sample
File size:1'208'093 bytes
First seen:2020-04-29 07:55:43 UTC
Last seen:Never
File type:Visual Basic Script (vbs) vbs
MIME type:text/plain
ssdeep 12288:VKZp3/4o3oiETYj5mnjV2RvrRc/nyttyzBifEX1bLpILRu:s9/4o3o9TYj5mjV2DRc/nmqiC1bLp2Y
TLSH 9C45465A207E99DE8E8D1E7E711F20192AE049BF7F8E03D02157D85EB0FBA50D5BC1A1
Reporter Racco42
Tags:dropper vbs ZLoader

Intelligence


File Origin
# of uploads :
1
# of downloads :
349
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Script-VBS.Trojan.Tlr
Status:
Malicious
First seen:
2020-04-29 05:05:42 UTC
File Type:
Text (VBS)
AV detection:
10 of 31 (32.26%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Visual Basic Script (vbs) vbs 78dbc02966ef38d387bbab8157a0a22595080f8f25f8efeef768bb82bf37f32e

(this sample)

  
Delivery method
Distributed via e-mail attachment

Comments