MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0b7c0c7c5acf337bb7d3b1d14867f0e6a94b4cdf71d22f6c299d65b678970205. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Formbook


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 0b7c0c7c5acf337bb7d3b1d14867f0e6a94b4cdf71d22f6c299d65b678970205
SHA3-384 hash: 42afa9216141d75e5caac1676d6f0a9494076c2950a4baa96590becd9fca4dcaf42f333c197e79ee0e20af12c2321cad
SHA1 hash: ba0c99d2dd68accac885f11275dd7db0048aded6
MD5 hash: e6d7d00684ee04aca83bfcb50dc39c76
humanhash: ten-eleven-monkey-mobile
File name:file.zip
Download: download sample
Signature Formbook
Create hunting rule
File size:640'492 bytes
First seen:2020-10-22 08:14:33 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 12288:eANsIKB07OOJSKvTgHs94sOp/IAP1HRi181IfvkrhPLoVX9iFH+Prt7KUS5mofAi:eANsIKBqOpK80C1g18qfOdLE9C6Kp/fX
TLSH 36D4239C1A9E044CF04F6B641E5E4EBC779504B9A2C9DBFF71208CEE58EC53B042E866
Reporter abuse_ch
Tags:FormBook zip


Avatar
abuse_ch
Malspam distributing Formbook:

HELO: stella.ns1.bg
Sending IP: 79.124.76.95
From: Vlad Alexandru <info@aklcorporation.com>
Subject: Re: Re: cerere de ofertă
Attachment: file.zip (contains "file.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
83
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/0b7c0c7c5acf337bb7d3b1d14867f0e6a94b4cdf71d22f6c299d65b678970205/
Threat name:
Win32.Trojan.FormBook
Create hunting rule
Status:
Malicious
First seen:
2020-10-22 07:49:40 UTC
AV detection:
23 of 29 (79.31%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=bn6ay7c2z4zxxn6twhiuqz7q42uuwtg7ohjc63bjtvs3m6exaicq._file
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Formbook

zip 0b7c0c7c5acf337bb7d3b1d14867f0e6a94b4cdf71d22f6c299d65b678970205

(this sample)

Formbook

Executable exe 81fd7b4c68d09347415a53e0fcf3a7fc3d3277be9fdc9a67e550078a53f4b96d

  
Dropping
MD5 b567701b34cae91c533164d244d0fdc8
  
Dropping
Formbook
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 81fd7b4c68d09347415a53e0fcf3a7fc3d3277be9fdc9a67e550078a53f4b96d

Comments