MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 96ac7875353bfa1c26442cd94ef61c25461c9d8fd0ba3eea8b4cbed4a39afcb6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


FormBook


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 96ac7875353bfa1c26442cd94ef61c25461c9d8fd0ba3eea8b4cbed4a39afcb6
SHA3-384 hash: cafcf87eeeb2dd584db5f9484f1d67ef6a1cc9b1389767a60294201f7e96f40b2c1ef8ebdba4bd11e875b94fcc94c60f
SHA1 hash: ae5cbca3c7bd25d963f66faed6809ed90837c84b
MD5 hash: fcd4719190aead29180235bfcdf6956d
humanhash: three-black-winner-thirteen
File name:JBC06072020.rar
Download: download sample
Signature FormBook
Create hunting rule
File size:279'126 bytes
First seen:2020-07-06 08:15:11 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 6144:ZegTdsjukZVmP73k7ffk6NEBhP0HO5CgUa4yytqbqy:ZMfE3IksEoHO/UEnR
TLSH A95423DC6ECD23446BCB597E3F9D231342C91C013297FA39B34856EA6319B8B840947E
Reporter abuse_ch
Tags:FormBook rar


Avatar
abuse_ch
Malspam distributing FormBook:

HELO: dongsonvina.co
Sending IP: 111.90.145.70
From: Sham J. Vaikos <Sham.Vaikoss@varroc.com>
Reply-To: jose.fili.gameiros@gmail.com
Subject: Require quotation
Attachment: JBC06072020.rar (contains "JBC06072020.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
69
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/96ac7875353bfa1c26442cd94ef61c25461c9d8fd0ba3eea8b4cbed4a39afcb6/
Threat name:
ByteCode-MSIL.Trojan.AgentTesla
Create hunting rule
Status:
Malicious
First seen:
2020-07-06 08:17:04 UTC
AV detection:
14 of 29 (48.28%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=s2whq5jvhp5byjseftmu55q4evdbzhmp2c5d52uljs7nji427s3a._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

FormBook

rar 96ac7875353bfa1c26442cd94ef61c25461c9d8fd0ba3eea8b4cbed4a39afcb6

(this sample)

FormBook

Executable exe 0f2473906fd34a74c861e8a2bd8461213b0b82b7b6242087f9597ad9f700dae9

  
Dropping
MD5 9f43f2627c89a38dca99d3b333c783d2
  
Dropping
FormBook
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 0f2473906fd34a74c861e8a2bd8461213b0b82b7b6242087f9597ad9f700dae9

Comments