MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 ba5cd78a6c64d3394ab2bbb0af7771747bfb16f24ed91646162273955c766161. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Formbook
Vendor detections: 2
| SHA256 hash: | ba5cd78a6c64d3394ab2bbb0af7771747bfb16f24ed91646162273955c766161 |
|---|---|
| SHA3-384 hash: | 3df641107bd86386e3d9fd9913536e6ce338796c0f4e38ff3a3fc09f4cd31c90c7893fe5dba2b15ce25519b75d1124e6 |
| SHA1 hash: | f546803c431e2c136e7f65f988e7c2d8172a8781 |
| MD5 hash: | e5bfe4273b99b40f4774971ef3489ebf |
| humanhash: | happy-cup-oklahoma-wisconsin |
| File name: | RFQ-20091748.rar |
| Download: | download sample |
| Signature | Formbook |
| File size: | 550'126 bytes |
| First seen: | 2020-10-06 05:56:42 UTC |
| Last seen: | Never |
| File type: | rar |
| MIME type: | application/x-rar |
| ssdeep | 12288:CTOwLtBz0gSNtV9CfZdGVABTwx6BPxhLygLBYVfk8CwqSAcA:VwLt90179CfuVAw8xLkSD |
| TLSH | DEC423F60AF1526B1C08038AA119171447BE94B4FC51B383D7CB82ED5E755AFBD4F22A |
| Reporter |  abuse_ch |
| Tags: | FormBook rar |
abuse_ch
Malspam distributing unidentified malware:HELO: bulussocks.cam
Sending IP: 111.90.141.60
From: Althaf Wahab <kkaragoz@pirisafe.cam>
Subject: Inquiry
Attachment: RFQ-20091748.rar (contains "RFQ-20091748.exe")
Intelligence
File Origin
# of uploads :
1
# of downloads :
89
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.