MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2cd9e8fc5b73c35422b79574233937370a03f6714ba9e813da80ac2974b4cf91. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Formbook


Vendor detections: 12


Intelligence 12 IOCs YARA 2 File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 2cd9e8fc5b73c35422b79574233937370a03f6714ba9e813da80ac2974b4cf91
SHA3-384 hash: 11b39444c33543327fd1c72f6e90363782d9e8d3ad38557e548e00947fe96a0db92bb1c9d155e120d268275bb0c10d52
SHA1 hash: 63b4eda132c801d98ef567d36e60c9a25138885b
MD5 hash: 0395cc1911b7756b2e8aaab5f187e3c0
humanhash: hot-jupiter-nebraska-failed
File name:2cd9e8fc5b73c35422b79574233937370a03f6714ba9e813da80ac2974b4cf91
Download: download sample
Signature Formbook
Create hunting rule
File size:691'200 bytes
First seen:2023-07-07 09:41:24 UTC
Last seen:2023-07-07 10:38:58 UTC
File type:Executable exe
MIME type:application/x-dosexec
imphash f34d5f2d4577ed6d9ceec516c1f5a744 (48'744 x AgentTesla, 19'609 x Formbook, 12'242 x SnakeKeylogger)
ssdeep 12288:oy9pdvDhH62MmgPFkiln09FkAJd3SmMqVhVQ0KH0t9HpDkZiVnoM:fdvDcAwailO9dBVTzuyo
Threatray 3'231 similar samples on MalwareBazaar
TLSH T1D1E4124133BE9B22D6F7C3F096612271933A2B9F3662E75D4DC370D91A16F054222E9B
TrID 71.1% (.EXE) Generic CIL Executable (.NET, Mono, etc.) (73123/4/13)
10.2% (.EXE) Win64 Executable (generic) (10523/12/4)
6.3% (.DLL) Win32 Dynamic Link Library (generic) (6578/25/2)
4.3% (.EXE) Win32 Executable (generic) (4505/5/1)
2.0% (.ICL) Windows Icons Library (generic) (2059/9)
Reporter adrian__luca
Tags:exe FormBook

Intelligence

File Origin
# of uploads :
2
# of downloads :
261
Origin country :
HU HU
Vendor Threat Intelligence
Malware family:
n/a
ID:
1
File name:
2cd9e8fc5b73c35422b79574233937370a03f6714ba9e813da80ac2974b4cf91
Verdict:
No threats detected
Analysis date:
2023-07-07 09:44:14 UTC
Tags:
n/a
Link:
https://app.any.run/tasks/c1a7c8fb-69af-4c0e-a1f4-5a3679e16843

Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Detection:
Formbook
Create hunting rule
Link:
https://www.capesandbox.com/analysis/410450/
Detection(s):
SecuriteInfo.com.Trojan.GenericKD.67668275.24134.16748.UNOFFICIAL
Create hunting rule

Result
Verdict:
Malware
Maliciousness:

Behaviour
Creating a window
Unauthorized injection to a recently created process
Restart of the analyzed sample
Creating a file
Verdict:
Malicious
Threat level:
  10/10
Confidence:
100%
Tags:
packed
Link:
https://www.filescan.io/uploads/64a7ddea7e0af7bfbe335b0b/reports/e0f40ded-2819-4b2c-a1c2-de2587145862/overview
Verdict:
Malicious
Labled as:
Trojan.Generic
Link:
https://www.hybrid-analysis.com/sample/2cd9e8fc5b73c35422b79574233937370a03f6714ba9e813da80ac2974b4cf91
Result
Verdict:
MALICIOUS
Details
Windows PE Executable
Found a Windows Portable Executable (PE) binary. Depending on context, the presence of a binary is suspicious or malicious.
Malware family:
Formbook
Create hunting rule
Verdict:
Malicious
Link:
https://analyze.intezer.com/analyses/61a1a459-ee2d-4b4a-9e11-411060032e2a
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/2cd9e8fc5b73c35422b79574233937370a03f6714ba9e813da80ac2974b4cf91/
Threat name:
ByteCode-MSIL.Trojan.Taskun
Create hunting rule
Status:
Malicious
First seen:
2023-06-21 10:57:13 UTC
File Type:
PE (.Net Exe)
Extracted files:
8
AV detection:
24 of 38 (63.16%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=ftm6r7c3opbviivxsv2cgojxg4fah5trjou6qe62qcwcs5fuz6iq._file
Verdict:
malicious
Label(s):
formbook
Create hunting rule
Similar samples:
13787d324c97537e5d73a1a3a0c72cdd35c2fac0c89b95589cc0fd275329a3a1
Formbook
455479a2d31bd901fdff62e67ec93e40f80e5956384e93e5030132d4a490501f
Formbook
830b7b74693b870abe6d20862ab5f5ab206cdf6e49755d9d542c9124f6646c1e
Formbook
a632288c7ae62bee60155ff916cd70e7ac14183b7789bcf64be9a186c0b75b0f
Formbook
bf7d050627a7bf67ad74bed6cf159d30c88423a1c0ef53f9fdc80b6977e79d9e
Formbook
d0dee99d6879a777938604421ce10c42a0fba9420f8fe7a77f8a4875a869208e
Formbook
d52990c3733f37b8d26a05d7db3864d5815bdfe6ecbaade840b81402e3cc29e7
Formbook
f508b66b3b6398f2a4d73ecfd057ab0804320d523e09feefbe59ee33b1124508
Formbook
fabfc52b4f6d55fee942c164fed13e4d2b2654cafeff471a52e13c31384c19ce
Formbook
+ 3'221 additional samples on MalwareBazaar
Result
Malware family:
n/a
Score:
  5/10
Tags:
n/a
Link:
https://tria.ge/reports/230707-lpbx7sgb97/
Behaviour
Suspicious behavior: EnumeratesProcesses
Suspicious use of WriteProcessMemory
Suspicious use of SetThreadContext
Unpacked files
SH256 hash:
52f358d201e81d3a0391cedd3042e2f957555b77aa49559f7fb810bbb7673ba1
MD5 hash:
c785ddc46141af772c75101d17c46a41
SHA1 hash:
e248723b6f60cc7607980d07172b64c33b2b2f15
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
SH256 hash:
d8ab8b80b2a11027f1a0a25bb1c574c04078f04cc552de816a63529cbaa1b34b
MD5 hash:
97e2fdc8cc1d176c44b1238078e9efeb
SHA1 hash:
d203905d03282aade8c29d6fb73459ac5cc798d7
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
SH256 hash:
fcd9a285076c520c73421fa9b0456c06cdbb3c087481f167e6bd5b18555dc191
MD5 hash:
bc1c82571e046deac0795f832966fda6
SHA1 hash:
76a5bf8577374c9e61abc76f4ba88ee044580525
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
SH256 hash:
ad0bfbb6ffc7acb9889e42a6d0074a8b6fa432cf92a825b722f6ed47368c6a2e
MD5 hash:
bf159aa383523c00c01f958521032d0a
SHA1 hash:
6236550aa551d034b8ba55baaaa37a2d180737c4
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
SH256 hash:
fc09d065229201d5a9533b5c1da051e3ff608622386d19789189c7fc20b8f71f
MD5 hash:
de05b0ccec087dba8066e4d16dda18b9
SHA1 hash:
b410dab67fd2751298a34e159f88d35c26d57f61
Detections:
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
Parent samples :
a965d3b87590d834993b3fd714164a0a128b19ad3f19957f6888f1c9205cb3c7
a632288c7ae62bee60155ff916cd70e7ac14183b7789bcf64be9a186c0b75b0f
455479a2d31bd901fdff62e67ec93e40f80e5956384e93e5030132d4a490501f
2cd9e8fc5b73c35422b79574233937370a03f6714ba9e813da80ac2974b4cf91
52969e048eebf45ce068d7fccaaaa5600ec8fe901ce176eaf3294f38ca34ebcc
SH256 hash:
f24e5d7d68b17f216657f7aa14c2459414755e07e441afc797bb1e3e109369b3
MD5 hash:
b39993db7663908f5b57fda910d5d018
SHA1 hash:
a1aca180778fdc99ee77c5774453ee7cfa1c97d1
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
SH256 hash:
52f358d201e81d3a0391cedd3042e2f957555b77aa49559f7fb810bbb7673ba1
MD5 hash:
c785ddc46141af772c75101d17c46a41
SHA1 hash:
e248723b6f60cc7607980d07172b64c33b2b2f15
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
SH256 hash:
d8ab8b80b2a11027f1a0a25bb1c574c04078f04cc552de816a63529cbaa1b34b
MD5 hash:
97e2fdc8cc1d176c44b1238078e9efeb
SHA1 hash:
d203905d03282aade8c29d6fb73459ac5cc798d7
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
SH256 hash:
fcd9a285076c520c73421fa9b0456c06cdbb3c087481f167e6bd5b18555dc191
MD5 hash:
bc1c82571e046deac0795f832966fda6
SHA1 hash:
76a5bf8577374c9e61abc76f4ba88ee044580525
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
SH256 hash:
ad0bfbb6ffc7acb9889e42a6d0074a8b6fa432cf92a825b722f6ed47368c6a2e
MD5 hash:
bf159aa383523c00c01f958521032d0a
SHA1 hash:
6236550aa551d034b8ba55baaaa37a2d180737c4
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
SH256 hash:
fc09d065229201d5a9533b5c1da051e3ff608622386d19789189c7fc20b8f71f
MD5 hash:
de05b0ccec087dba8066e4d16dda18b9
SHA1 hash:
b410dab67fd2751298a34e159f88d35c26d57f61
Detections:
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
Parent samples :
a965d3b87590d834993b3fd714164a0a128b19ad3f19957f6888f1c9205cb3c7
a632288c7ae62bee60155ff916cd70e7ac14183b7789bcf64be9a186c0b75b0f
455479a2d31bd901fdff62e67ec93e40f80e5956384e93e5030132d4a490501f
2cd9e8fc5b73c35422b79574233937370a03f6714ba9e813da80ac2974b4cf91
52969e048eebf45ce068d7fccaaaa5600ec8fe901ce176eaf3294f38ca34ebcc
SH256 hash:
f24e5d7d68b17f216657f7aa14c2459414755e07e441afc797bb1e3e109369b3
MD5 hash:
b39993db7663908f5b57fda910d5d018
SHA1 hash:
a1aca180778fdc99ee77c5774453ee7cfa1c97d1
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
SH256 hash:
52f358d201e81d3a0391cedd3042e2f957555b77aa49559f7fb810bbb7673ba1
MD5 hash:
c785ddc46141af772c75101d17c46a41
SHA1 hash:
e248723b6f60cc7607980d07172b64c33b2b2f15
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
SH256 hash:
d8ab8b80b2a11027f1a0a25bb1c574c04078f04cc552de816a63529cbaa1b34b
MD5 hash:
97e2fdc8cc1d176c44b1238078e9efeb
SHA1 hash:
d203905d03282aade8c29d6fb73459ac5cc798d7
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
SH256 hash:
fcd9a285076c520c73421fa9b0456c06cdbb3c087481f167e6bd5b18555dc191
MD5 hash:
bc1c82571e046deac0795f832966fda6
SHA1 hash:
76a5bf8577374c9e61abc76f4ba88ee044580525
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
SH256 hash:
ad0bfbb6ffc7acb9889e42a6d0074a8b6fa432cf92a825b722f6ed47368c6a2e
MD5 hash:
bf159aa383523c00c01f958521032d0a
SHA1 hash:
6236550aa551d034b8ba55baaaa37a2d180737c4
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
SH256 hash:
fc09d065229201d5a9533b5c1da051e3ff608622386d19789189c7fc20b8f71f
MD5 hash:
de05b0ccec087dba8066e4d16dda18b9
SHA1 hash:
b410dab67fd2751298a34e159f88d35c26d57f61
Detections:
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
Parent samples :
a965d3b87590d834993b3fd714164a0a128b19ad3f19957f6888f1c9205cb3c7
a632288c7ae62bee60155ff916cd70e7ac14183b7789bcf64be9a186c0b75b0f
455479a2d31bd901fdff62e67ec93e40f80e5956384e93e5030132d4a490501f
2cd9e8fc5b73c35422b79574233937370a03f6714ba9e813da80ac2974b4cf91
52969e048eebf45ce068d7fccaaaa5600ec8fe901ce176eaf3294f38ca34ebcc
SH256 hash:
f24e5d7d68b17f216657f7aa14c2459414755e07e441afc797bb1e3e109369b3
MD5 hash:
b39993db7663908f5b57fda910d5d018
SHA1 hash:
a1aca180778fdc99ee77c5774453ee7cfa1c97d1
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
SH256 hash:
52f358d201e81d3a0391cedd3042e2f957555b77aa49559f7fb810bbb7673ba1
MD5 hash:
c785ddc46141af772c75101d17c46a41
SHA1 hash:
e248723b6f60cc7607980d07172b64c33b2b2f15
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
SH256 hash:
d8ab8b80b2a11027f1a0a25bb1c574c04078f04cc552de816a63529cbaa1b34b
MD5 hash:
97e2fdc8cc1d176c44b1238078e9efeb
SHA1 hash:
d203905d03282aade8c29d6fb73459ac5cc798d7
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
SH256 hash:
fcd9a285076c520c73421fa9b0456c06cdbb3c087481f167e6bd5b18555dc191
MD5 hash:
bc1c82571e046deac0795f832966fda6
SHA1 hash:
76a5bf8577374c9e61abc76f4ba88ee044580525
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
SH256 hash:
ad0bfbb6ffc7acb9889e42a6d0074a8b6fa432cf92a825b722f6ed47368c6a2e
MD5 hash:
bf159aa383523c00c01f958521032d0a
SHA1 hash:
6236550aa551d034b8ba55baaaa37a2d180737c4
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
SH256 hash:
fc09d065229201d5a9533b5c1da051e3ff608622386d19789189c7fc20b8f71f
MD5 hash:
de05b0ccec087dba8066e4d16dda18b9
SHA1 hash:
b410dab67fd2751298a34e159f88d35c26d57f61
Detections:
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
Parent samples :
a965d3b87590d834993b3fd714164a0a128b19ad3f19957f6888f1c9205cb3c7
a632288c7ae62bee60155ff916cd70e7ac14183b7789bcf64be9a186c0b75b0f
455479a2d31bd901fdff62e67ec93e40f80e5956384e93e5030132d4a490501f
2cd9e8fc5b73c35422b79574233937370a03f6714ba9e813da80ac2974b4cf91
52969e048eebf45ce068d7fccaaaa5600ec8fe901ce176eaf3294f38ca34ebcc
SH256 hash:
f24e5d7d68b17f216657f7aa14c2459414755e07e441afc797bb1e3e109369b3
MD5 hash:
b39993db7663908f5b57fda910d5d018
SHA1 hash:
a1aca180778fdc99ee77c5774453ee7cfa1c97d1
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
SH256 hash:
52f358d201e81d3a0391cedd3042e2f957555b77aa49559f7fb810bbb7673ba1
MD5 hash:
c785ddc46141af772c75101d17c46a41
SHA1 hash:
e248723b6f60cc7607980d07172b64c33b2b2f15
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
SH256 hash:
d8ab8b80b2a11027f1a0a25bb1c574c04078f04cc552de816a63529cbaa1b34b
MD5 hash:
97e2fdc8cc1d176c44b1238078e9efeb
SHA1 hash:
d203905d03282aade8c29d6fb73459ac5cc798d7
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
SH256 hash:
fcd9a285076c520c73421fa9b0456c06cdbb3c087481f167e6bd5b18555dc191
MD5 hash:
bc1c82571e046deac0795f832966fda6
SHA1 hash:
76a5bf8577374c9e61abc76f4ba88ee044580525
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
SH256 hash:
ad0bfbb6ffc7acb9889e42a6d0074a8b6fa432cf92a825b722f6ed47368c6a2e
MD5 hash:
bf159aa383523c00c01f958521032d0a
SHA1 hash:
6236550aa551d034b8ba55baaaa37a2d180737c4
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
SH256 hash:
fc09d065229201d5a9533b5c1da051e3ff608622386d19789189c7fc20b8f71f
MD5 hash:
de05b0ccec087dba8066e4d16dda18b9
SHA1 hash:
b410dab67fd2751298a34e159f88d35c26d57f61
Detections:
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
Parent samples :
a965d3b87590d834993b3fd714164a0a128b19ad3f19957f6888f1c9205cb3c7
a632288c7ae62bee60155ff916cd70e7ac14183b7789bcf64be9a186c0b75b0f
455479a2d31bd901fdff62e67ec93e40f80e5956384e93e5030132d4a490501f
2cd9e8fc5b73c35422b79574233937370a03f6714ba9e813da80ac2974b4cf91
52969e048eebf45ce068d7fccaaaa5600ec8fe901ce176eaf3294f38ca34ebcc
SH256 hash:
f24e5d7d68b17f216657f7aa14c2459414755e07e441afc797bb1e3e109369b3
MD5 hash:
b39993db7663908f5b57fda910d5d018
SHA1 hash:
a1aca180778fdc99ee77c5774453ee7cfa1c97d1
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
SH256 hash:
52f358d201e81d3a0391cedd3042e2f957555b77aa49559f7fb810bbb7673ba1
MD5 hash:
c785ddc46141af772c75101d17c46a41
SHA1 hash:
e248723b6f60cc7607980d07172b64c33b2b2f15
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
SH256 hash:
d8ab8b80b2a11027f1a0a25bb1c574c04078f04cc552de816a63529cbaa1b34b
MD5 hash:
97e2fdc8cc1d176c44b1238078e9efeb
SHA1 hash:
d203905d03282aade8c29d6fb73459ac5cc798d7
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
SH256 hash:
fcd9a285076c520c73421fa9b0456c06cdbb3c087481f167e6bd5b18555dc191
MD5 hash:
bc1c82571e046deac0795f832966fda6
SHA1 hash:
76a5bf8577374c9e61abc76f4ba88ee044580525
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
SH256 hash:
ad0bfbb6ffc7acb9889e42a6d0074a8b6fa432cf92a825b722f6ed47368c6a2e
MD5 hash:
bf159aa383523c00c01f958521032d0a
SHA1 hash:
6236550aa551d034b8ba55baaaa37a2d180737c4
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
SH256 hash:
fc09d065229201d5a9533b5c1da051e3ff608622386d19789189c7fc20b8f71f
MD5 hash:
de05b0ccec087dba8066e4d16dda18b9
SHA1 hash:
b410dab67fd2751298a34e159f88d35c26d57f61
Detections:
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
win_formbook_w0
Create hunting rule
win_formbook_auto
Create hunting rule
win_formbook_g0
Create hunting rule
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
Parent samples :
a965d3b87590d834993b3fd714164a0a128b19ad3f19957f6888f1c9205cb3c7
a632288c7ae62bee60155ff916cd70e7ac14183b7789bcf64be9a186c0b75b0f
455479a2d31bd901fdff62e67ec93e40f80e5956384e93e5030132d4a490501f
2cd9e8fc5b73c35422b79574233937370a03f6714ba9e813da80ac2974b4cf91
52969e048eebf45ce068d7fccaaaa5600ec8fe901ce176eaf3294f38ca34ebcc
SH256 hash:
f24e5d7d68b17f216657f7aa14c2459414755e07e441afc797bb1e3e109369b3
MD5 hash:
b39993db7663908f5b57fda910d5d018
SHA1 hash:
a1aca180778fdc99ee77c5774453ee7cfa1c97d1
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
SH256 hash:
2cd9e8fc5b73c35422b79574233937370a03f6714ba9e813da80ac2974b4cf91
MD5 hash:
0395cc1911b7756b2e8aaab5f187e3c0
SHA1 hash:
63b4eda132c801d98ef567d36e60c9a25138885b
Link:
https://www.unpac.me/results/68ac686f-b2dc-4100-8a49-ee6cc00804c6/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/2cd9e8fc5b73c35422b79574233937370a03f6714ba9e813da80ac2974b4cf91

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:pe_imphash
Create hunting rule
Rule name:Skystars_Malware_Imphash
Create hunting rule
Author:Skystars LightDefender
Description:imphash

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Cape
Cape
https://www.capesandbox.com/analysis/410450/

Comments