MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 1464c43fc96ebdca9e41d78122e0a3e00a386c9fd96efd3acabf08ab32870f26. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


FormBook


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 1464c43fc96ebdca9e41d78122e0a3e00a386c9fd96efd3acabf08ab32870f26
SHA3-384 hash: 62d45991223027db77e21fe07e979bbd0ef90c4b9ee60fb807ad924da3822ed4b89e570652bb871e91a0c488fe40cc6d
SHA1 hash: 08584b9eceb4e3753593d64d7ac189a7d324212d
MD5 hash: c2d7d2edd52ad85c54d5eebe2589e3b0
humanhash: hawaii-arizona-pluto-florida
File name:REVISED NEW PURCHASE ORDER.ace
Download: download sample
Signature FormBook
Create hunting rule
File size:349'965 bytes
First seen:2020-07-01 14:39:58 UTC
Last seen:2020-07-02 01:48:46 UTC
File type: ace
MIME type:application/octet-stream
ssdeep 6144:tAicx6BpHojG01MZ5EfHhqhIQ/3VReEe8YUpyhda9b:fccBxT01K5EfH+IQ/lRMUUhdK
TLSH B674235059E107DE885339870F92DD9E0AD989ACF65D0FAADF9211460CF7FB01CAB531
Reporter jarumlus

Intelligence

File Origin
# of uploads :
4
# of downloads :
67
Origin country :
n/a
Vendor Threat Intelligence
Detection(s):
Sanesecurity.Malware.25166.AceHeur.Exe.UNOFFICIAL
Create hunting rule

SecuriteInfo.com.Suspicious-ACE-exe.UNOFFICIAL
Create hunting rule

Detection:
n/a
Link:
https://mwdb.cert.pl/sample/1464c43fc96ebdca9e41d78122e0a3e00a386c9fd96efd3acabf08ab32870f26/
Threat name:
Win32.Infostealer.Fareit
Create hunting rule
Status:
Malicious
First seen:
2020-07-01 14:41:02 UTC
AV detection:
17 of 48 (35.42%)
Threat level:
  5/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

FormBook

ace 1464c43fc96ebdca9e41d78122e0a3e00a386c9fd96efd3acabf08ab32870f26

(this sample)

FormBook

Executable exe 086616679314c8f75f9fa03cc722a56008166c8e9c8a63a653ed45d35628fdf4

  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 086616679314c8f75f9fa03cc722a56008166c8e9c8a63a653ed45d35628fdf4
  
Dropping
MD5 1b1c0c52aa4ea5794cce1dbce13ff573

Comments