MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 af3624cd37820cb6ec0734daf4e237002b0d81c0ad30f429045be03a4570b502. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
TrickBot
Vendor detections: 2
| SHA256 hash: | af3624cd37820cb6ec0734daf4e237002b0d81c0ad30f429045be03a4570b502 |
|---|---|
| SHA3-384 hash: | 2ecac2c613a991a20f587c23ec6ecaa544517605b2a5284fef354285c749fd04ab5e01df3734a596a26294311032220d |
| SHA1 hash: | 30e83bab148dd525d52d3111895a200f8ba41462 |
| MD5 hash: | c8429f36d92170a3f0b54748cdd7734b |
| humanhash: | magazine-ceiling-coffee-april |
| File name: | CreditNote (1209).xls |
| Download: | download sample |
| Signature | TrickBot |
| File size: | 976'896 bytes |
| First seen: | 2020-06-30 23:20:53 UTC |
| Last seen: | 2020-06-30 23:55:10 UTC |
| File type: |  xls |
| MIME type: | application/vnd.ms-excel |
| ssdeep | 24576:cZ5dLWgv9SLIQTui1QDRRO5sY7YnSi6+wYmtyll:idigv9QTui1QtRE7YnS4Mtul |
| TLSH | 7625DEC1EAA6DA65CA85C1708F8747D12B01FD006930478B36C1B3377FAEAB4AD5E4D9 |
| Reporter |  0xCARNAGE |
| Tags: | TrickBot |
Intelligence
File Origin
# of uploads :
2
# of downloads :
117
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
Document-Word.Trojan.Kryptik
Status:
Malicious
First seen:
2020-06-30 23:22:05 UTC
AV detection:
6 of 48 (12.50%)
Threat level:
5/5
Result
Malware family:
n/a
Score:
1/10
Tags:
n/a
Behaviour
Suspicious behavior: AddClipboardFormatListener
Suspicious use of SetWindowsHookEx
Suspicious behavior: GetForegroundWindowSpam
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe 
Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.