MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a11b46439172c25402928933444aa2e79ba33346e36f5cc329fe9b207d182e26. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


FormBook


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: a11b46439172c25402928933444aa2e79ba33346e36f5cc329fe9b207d182e26
SHA3-384 hash: af23325ae9ef1918353777458756fc0eaceb2c47b4a5a04d96a16ea1d50a7ba35fdace96bf66c64f9e7afcfd42b7a567
SHA1 hash: a3c29f6e75706406931469faa1049b1dc5e15ab9
MD5 hash: 16546e8b58bc16cfcf99a968236c871c
humanhash: skylark-idaho-hot-alabama
File name:Loaluxv.rar
Download: download sample
Signature FormBook
Create hunting rule
File size:397'920 bytes
First seen:2020-06-16 13:57:22 UTC
Last seen:Never
File type: rar
MIME type:application/x-rar
ssdeep 6144:1DgJFn/1NiA6a6xAPxGWKbuM/Q1i96ILiML/XZsdScnRhBa/XVc6v6YLtN2MEVeR:1UZNiRpWKbuQQcLiL8MIP+6XpMMEgR
TLSH 8B84239FB40129B908B9E7455BB4E72A10ECDFBACAB7FDB1CDE518511C35AD3200618E
Reporter abuse_ch
Tags:FormBook rar


Avatar
abuse_ch
Malspam distributing FormBook:

HELO: alt12.smtp-out.videotron.ca
Sending IP: 135.19.0.26
From: Amy Huang<amy@starflopump.com>
Reply-To: <Elandapos_Eric@163.com>
Subject: Re : FYI
Attachment: Loaluxv.rar (contains "Loaluxv.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
66
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=uenumq4rolbfiausrezuisvc46n2gm2g4nxvzqzj72nsa7iyfyta._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

FormBook

rar a11b46439172c25402928933444aa2e79ba33346e36f5cc329fe9b207d182e26

(this sample)

FormBook

Executable exe c441bca193ad71497180db31fc7e3641935113d929c97f2ffc100ff109c4b7b6

  
Dropping
MD5 44f2447e0a7f0c0ea8d05daa26515607
  
Dropping
FormBook
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 c441bca193ad71497180db31fc7e3641935113d929c97f2ffc100ff109c4b7b6

Comments