MALICIOUS — FORMAT.COM

MALICIOUS — FORMAT.COM is a unknown sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (87/100), attributed to the UNOFFICIAL family. 2 of 47 detection engines flagged it.

Identification

• SHA-256: 277d0780d74df4382a3e976ec5a9c83d8b580fe5373fe952818b179f8a97a439
• SHA-1: 353aca66cff61900bb7998618d5b48856b7f548f
• MD5: 12fffa37a8e57e84a4a07dd4d9aea247
• ssdeep: 384:TehMrSgkpRP34058feT5ajcpT4bFdbKAVs7ra867j0rSTe2huyb73fvA6DitMhrj:TevX3qGsW43bKAsyZF/nA6Di+KoH/Fp
• TLSH: T1F62CD17DA9194B5C7A0C616CB37398CEC5CFF87332D0267EE51474A1876624A2289099
• Submitted as: FORMAT.COM
• File type: unknown · Size: 25813 bytes
• Verdict: malicious (87/100) · Family: UNOFFICIAL

Source: theZoo · first seen 2026-07-25T19:11:26.095Z · SHA-256 not source-verified

Detections (2 of 47 engines)

• MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
• ClamAV (daily): {HEX}bin.trojan.generic.ussr.114.UNOFFICIAL

Why this verdict

The malicious score of 87/100 is the fusion of 2 weighted signals:

• ClamAV (daily) flagged {HEX}bin.trojan.generic.ussr.114.UNOFFICIAL (rule {HEX}bin.trojan.generic.ussr.114.UNOFFICIAL) - engine signal, weight 0.90, confidence 0.95
• Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55

File paths

• X:\COMMAND

More UNOFFICIAL samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report