MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 b54764ed0643c9bceb75171eda09ed6336d36ca787521916d202c5006f5fa830. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Formbook
Vendor detections: 4
| SHA256 hash: | b54764ed0643c9bceb75171eda09ed6336d36ca787521916d202c5006f5fa830 |
|---|---|
| SHA3-384 hash: | 8036ec1688deb566975ed42d3ed98e84717c5ab8f4324111ebf8e3d2eae5cc08eb625b5a5e411e678363f6dfb088b212 |
| SHA1 hash: | 2e3e0579dd470f7e5972b553a4b029ffe5e4ef19 |
| MD5 hash: | 1c8eb7c963c372269acff1a4113a3851 |
| humanhash: | football-skylark-white-rugby |
| File name: | P1 032021.iso |
| Download: | download sample |
| Signature | Formbook |
| File size: | 530'432 bytes |
| First seen: | 2021-04-01 15:42:32 UTC |
| Last seen: | Never |
| File type: | iso |
| MIME type: | application/x-iso9660-image |
| ssdeep | 6144:Xcw3BWxWMDIGSvzAN4VJbvtr0sCgfiEOOWxudAFZukFdhBWGWNgp:Xcw3tZpPztZidOWxu2F0kXWGWNa |
| TLSH | 83B4AC7C32C46F47E16D96F88A10630153FE94A119B1FE897D8869990BD23C1DAB23DF |
| Reporter |  fabjer |
| Tags: | FormBook iso |
Intelligence
File Origin
# of uploads :
1
# of downloads :
86
Origin country :
n/a
Vendor Threat Intelligence
Result
Verdict:
MALICIOUS
Threat name:
ByteCode-MSIL.Spyware.Noon
Status:
Malicious
First seen:
2021-04-01 08:13:36 UTC
AV detection:
9 of 46 (19.57%)
Threat level:
2/5
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.10
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.