MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 106f363aede8b40790515c285099bcbf16124b630ddf1350798c5d209c0495a0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Formbook
Vendor detections: 3
| SHA256 hash: | 106f363aede8b40790515c285099bcbf16124b630ddf1350798c5d209c0495a0 |
|---|---|
| SHA3-384 hash: | aa3a340c7db423c918b848d8ace869c39ac032b2b287f306befdf1843220ae6d07849603e287d525b2cced0242a5885d |
| SHA1 hash: | 2d934fa952e53f2ed75ac684920bda317a367ab7 |
| MD5 hash: | 5293fc2a039ec3f2618dbb9e595f1142 |
| humanhash: | sierra-magazine-rugby-charlie |
| File name: | New order.rar |
| Download: | download sample |
| Signature | Formbook |
| File size: | 260'859 bytes |
| First seen: | 2021-01-13 20:12:51 UTC |
| Last seen: | Never |
| File type: | rar |
| MIME type: | application/x-rar |
| ssdeep | 6144:Vm7WjrkLPnDmCcTu/wlFjANph9rgPhnHOsi7bhK50K:VmCjIZcTfnjuoO571KaK |
| TLSH | E34423C2417623BF0F329BB8C3561B1355511B3AB0D29C52FABE61FCE55D1A09ACE25C |
| Reporter |  abuse_ch |
| Tags: | FormBook rar |
abuse_ch
Malspam distributing Formbook:From: Mehmet Kumar . <jcarano@afsinc.org>
Subject: AW:Reply.
Attachment: New order.rar (contains "Inv.exe")
Intelligence
File Origin
# of uploads :
1
# of downloads :
150
Origin country :
n/a
Vendor Threat Intelligence
Threat name:
Win32.Trojan.AgentTesla
Status:
Malicious
First seen:
2021-01-13 20:13:15 UTC
AV detection:
12 of 44 (27.27%)
Threat level:
5/5
Detection(s):
Malicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
exe Dropping
Formbook
Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.