MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 80fa55e625d257bc39a7bfcee0d2e7f8f59e2a3e501a9bf85cfc9655f65b2ca0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Formbook


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments

SHA256 hash: 80fa55e625d257bc39a7bfcee0d2e7f8f59e2a3e501a9bf85cfc9655f65b2ca0
SHA3-384 hash: 969c750a0dafce407e45a2d01cbeadc96638d16d260a636285466ece0c2851e4d4faf1d7f0376a58f884716d25726eeb
SHA1 hash: 5dd8115fd69d4d626ed190de16d453ce91f0a521
MD5 hash: 5fe2f71aee232bd330edea9145a449d1
humanhash: stream-seven-green-fanta
File name:5fe2f71aee232bd330edea9145a449d1.exe
Download: download sample
Signature Formbook
File size:355'843 bytes
First seen:2021-09-01 18:36:18 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
ssdeep 6144:5iFskbJ6/ai7oYAzO8HCICeP9nYU7m9kxtB1zAhX5Wl1wlZDIofpY87afXkg2z:IFLbM/aikYIO8HCICeVnYSm9iDWETkiO
TLSH T1937401187FD59C43C72A0E7B95612061553AEA626907F397A99433FC1A0F3FB0903AE7
Reporter abuse_ch
Tags:exe FormBook

Intelligence


File Origin
# of uploads :
1
# of downloads :
269
Origin country :
n/a
Vendor Threat Intelligence
Malware family:
n/a
ID:
1
File name:
5fe2f71aee232bd330edea9145a449d1.exe
Verdict:
No threats detected
Analysis date:
2021-09-01 18:42:09 UTC
Tags:
n/a

Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Result
Verdict:
Clean
Maliciousness:
Result
Threat name:
Unknown
Detection:
malicious
Classification:
n/a
Score:
52 / 100
Signature
Machine Learning detection for sample
Multi AV Scanner detection for submitted file
Behaviour
Behavior Graph:
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Unpacked files
SH256 hash:
80fa55e625d257bc39a7bfcee0d2e7f8f59e2a3e501a9bf85cfc9655f65b2ca0
MD5 hash:
5fe2f71aee232bd330edea9145a449d1
SHA1 hash:
5dd8115fd69d4d626ed190de16d453ce91f0a521
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Web download

Formbook

Executable exe 80fa55e625d257bc39a7bfcee0d2e7f8f59e2a3e501a9bf85cfc9655f65b2ca0

(this sample)

  
Delivery method
Distributed via web download

Comments