MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 c47715c05af964beb68ead4d7273a838876158f0ba290a2a524a0b873dc01732. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
FormBook
Vendor detections: 3
| SHA256 hash: | c47715c05af964beb68ead4d7273a838876158f0ba290a2a524a0b873dc01732 |
|---|---|
| SHA3-384 hash: | 8abc0fbd7f4be50298c5bbd3dd6648647bb2ac13e85fbe67ca4abc0bb9f2bab0c7e60aedb9feab9ccd71574b41b60e6b |
| SHA1 hash: | e6c6ec0c6373c9f17d81f351e7b54e9af0e64afe |
| MD5 hash: | f716fcc6adcac945b42d583c79fca1b7 |
| humanhash: | carbon-floor-yellow-four |
| File name: | SOA 2.GZ |
| Download: | download sample |
| Signature | FormBook |
| File size: | 319'159 bytes |
| First seen: | 2020-08-04 07:07:12 UTC |
| Last seen: | Never |
| File type: | gz |
| MIME type: | application/x-rar |
| ssdeep | 6144:N9xxETjxtanLKjaBhzDFkqt164H3uJvyi9+yu9kfV5cVH:N9xy9ta+jWhTg4e9kAg |
| TLSH | E3642358257D46F35B7AECC4F442B6E1083F4E8424E67684AEEEF2BFE5450B64006DC8 |
| Reporter |  abuse_ch |
| Tags: | FormBook gz |
abuse_ch
Malspam distributing FormBook:From: <sales@hinet.net>
Reply-To: roadtriip25@gmail.com
Subject: RE:SOA
Attachment: SOA 2.GZ (contains "SOA (2).exe")
Intelligence
File Origin
# of uploads :
1
# of downloads :
67
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
ByteCode-MSIL.Backdoor.NanoCore
Status:
Malicious
First seen:
2020-08-04 07:09:04 UTC
AV detection:
13 of 28 (46.43%)
Threat level:
5/5
Detection(s):
Malicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Dropping
FormBook
Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.