MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 34679454648fba512cdd3655f06d4ec68dd305c097b7fcc968c0f6892dfefce9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Formbook


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 34679454648fba512cdd3655f06d4ec68dd305c097b7fcc968c0f6892dfefce9
SHA3-384 hash: 100f83151e0a5a4a56c2ba76da9c3d32afefc9567d0fa7a648a72200f8bc930b109753c98a058f69c55ca41113d3d21b
SHA1 hash: e29707d5486a820bcbdf4e115d63f2f5f992e503
MD5 hash: c486d5bbec32f9ed92bd667526c94727
humanhash: moon-may-missouri-bakerloo
File name:NEW PRODUCT INQUIRY.Z
Download: download sample
Signature Formbook
Create hunting rule
File size:257'975 bytes
First seen:2020-08-19 11:24:54 UTC
Last seen:Never
File type: z
MIME type:application/x-rar
ssdeep 6144:nbRbxdLocN6Sl/l6rSfmWBniOKZi4n9uTzfj99pRuJo7wjYrMTW08q:nbbGBSlkrSfmk4cJ9pkoGYrMTKq
TLSH 334423F4C5909FDAA3D62EC24C80EBFE9A6977298E7051D276959F0D9C8C704C4EC24A
Reporter abuse_ch
Tags:FormBook z


Avatar
abuse_ch
Malspam distributing Formbook:

From: Lisa Lee<sales@chaumetbag.com>
Subject: URGENT ORDER REVIEW PLEASE
Attachment: NEW PRODUCT INQUIRY.Z (contains "NEW PRODUCT INQUIRY.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
91
Origin country :
n/a
Vendor Threat Intelligence
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/34679454648fba512cdd3655f06d4ec68dd305c097b7fcc968c0f6892dfefce9/
Threat name:
Win32.Trojan.Wacatac
Create hunting rule
Status:
Malicious
First seen:
2020-08-19 01:24:00 UTC
AV detection:
14 of 29 (48.28%)
Threat level:
  5/5
Detection(s):
Malicious file
Link:
https://check.spamhaus.org/check/?searchterm=grtzivder65fclg5gzk7a3koy2g5gboas637zsliyd3islp67tuq._file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/34679454648fba512cdd3655f06d4ec68dd305c097b7fcc968c0f6892dfefce9

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Formbook

z 34679454648fba512cdd3655f06d4ec68dd305c097b7fcc968c0f6892dfefce9

(this sample)

Formbook

Executable exe e548234adb2b484793484466ef99084bb77854de66782af91e38420a198b4f83

  
Dropping
MD5 f459adc3c815cf09df333860a15012bb
  
Dropping
Formbook
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 e548234adb2b484793484466ef99084bb77854de66782af91e38420a198b4f83

Comments