🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ce86b30f2b4e67b2aee45aac7de1a434b26044ac266a59dc7f280390063396d7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments

SHA256 hash: ce86b30f2b4e67b2aee45aac7de1a434b26044ac266a59dc7f280390063396d7
SHA3-384 hash: 3a9adbc138c16b96c433a1b579627cfbf414099ec3fe4c8cc3ae271be53d4d070cadcf5e3f0450c5a74f8aa33f5795d2
SHA1 hash: 3a48037f3183eff27e4fc800186877c3e8d2ffee
MD5 hash: 822155adbf8dd4f0dc4c606e62e336fd
humanhash: fillet-pizza-whiskey-pizza
File name:FB-455.pdf
Download: download sample
File size:90'805 bytes
First seen:2022-02-10 11:28:45 UTC
Last seen:Never
File type: pdf
MIME type:application/pdf
ssdeep 1536:HULHc/juFOavULHc/juFOaJ2uUJLZGDy33lYblHsywUU0hhb0PZRfua:H6VTv6VTJ2u0LZGW33jywQhb0x8a
TLSH T1809312367BBE4C97C963CE02361BF8504BD9228DBA82A516E414FDD734DFF295408B92
Reporter proxylife
Tags:cve-2017-0199 pdf

Intelligence


File Origin
# of uploads :
1
# of downloads :
536
Origin country :
n/a
Vendor Threat Intelligence
Verdict:
Malicious
Threat level:
  10/10
Confidence:
100%
Tags:
CVE-2017-0199 exploit VelvetSweatshop
Label:
Malicious
Suspicious Score:
5.5/10
Score Malicious:
56%
Score Benign:
44%
Threat name:
Document-Office.Exploit.CVE-2017-0199
Status:
Malicious
First seen:
2022-02-10 11:29:10 UTC
File Type:
Document
Extracted files:
34
AV detection:
7 of 43 (16.28%)
Threat level:
  5/5
Malware family:
FormBook
Verdict:
Malicious
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments