MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 619debfe0195feb1afec3eb57f30f05d4f98cd1cce5c1a8b104378be3c5822a3. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


FormBook


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 619debfe0195feb1afec3eb57f30f05d4f98cd1cce5c1a8b104378be3c5822a3
SHA3-384 hash: 206ebaecf507f2a1cfa556a195a0581ad9df2957f396dd5e2380a61061fd3d817a2d6bb4f77fda591fa75fc6b115e146
SHA1 hash: 288dac2704e7bd497676b145df7c09cbd3ffa696
MD5 hash: 1fcd2c0546c2cd36f4fc0ef785c152e3
humanhash: delta-colorado-angel-kentucky
File name:Doc726273273827362637 Pdf.iso
Download: download sample
Signature FormBook
Create hunting rule
File size:722'944 bytes
First seen:2020-07-09 07:34:14 UTC
Last seen:Never
File type: iso
MIME type:application/x-iso9660-image
ssdeep 12288:hJQwoCtzUOtvkF2bDiuUBG9acTaulCSRO6cdJ+:MSzv+2blUOLTESREdJ+
TLSH CEF4E03437D09D12CBBE4F76857140009FB1AA27A927E3ABBECC25DE0B9B7594902717
Reporter abuse_ch
Tags:FormBook HSBC iso


Avatar
abuse_ch
Malspam distributing FormBook:

HELO: momo.com
Sending IP: 45.156.23.120
From: HSBC Advising Service <orpha@justicemoen.xyz>
Subject: Payment Advice - Advice Ref:[KLU76272632] / Priority payment / Customer Ref:[Ju82736372]
Attachment: Doc726273273827362637 Pdf.iso (contains "Doc726273273827362637 Pdf.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
75
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
SecuriteInfo.com.Trojan.PackedNET.378.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/619debfe0195feb1afec3eb57f30f05d4f98cd1cce5c1a8b104378be3c5822a3/
Threat name:
ByteCode-MSIL.Trojan.Swotter
Create hunting rule
Status:
Malicious
First seen:
2020-07-09 07:36:07 UTC
AV detection:
12 of 29 (41.38%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=mgo6x7qbsx7ldl7mh22x6mhqlvhzrti4zzobvcyqin4l4pcyekrq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

FormBook

iso 619debfe0195feb1afec3eb57f30f05d4f98cd1cce5c1a8b104378be3c5822a3

(this sample)

FormBook

Executable exe cc296ddd36ee729fbdea514a26f387b2b5e88dc6bf3c61c68fb27572703acbb6

  
Dropping
MD5 7237ce16ad8246b9ea641a1c41cb0992
  
Dropping
FormBook
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 cc296ddd36ee729fbdea514a26f387b2b5e88dc6bf3c61c68fb27572703acbb6

Comments