MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 5115f90655630bafc0704e0d4560cd5919210ab7c36e01a7c37b96b84b1ece92. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Formbook


Vendor detections: 2


Intelligence 2 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 5115f90655630bafc0704e0d4560cd5919210ab7c36e01a7c37b96b84b1ece92
SHA3-384 hash: 7e525a996970a238c48705792c68aca1825d1f9a6d00f3c70cbeb900b412e76227e7881a8e3578315bb82ce1e508e1c9
SHA1 hash: 02c59707ec4675d48fc0c7ed66c1ff5dc797923d
MD5 hash: 5f556c7677938ba882f59c38c1c712a2
humanhash: cold-fanta-missouri-november
File name:Swift Copy.7z
Download: download sample
Signature Formbook
Create hunting rule
File size:242'003 bytes
First seen:2020-05-27 12:03:17 UTC
Last seen:Never
File type: 7z
MIME type:application/x-rar
ssdeep 6144:kbjxhzVj5MtOFzPwsfffd6/9xoDJH1Mr7Znc5FDQRuHTY:kbjPD5FzPwsXQV61H1acQ2Y
TLSH B7342359623523B6B0D652437B4DB411304718EBF5FA2F192A0DABFFA53F200E849E87
Reporter abuse_ch
Tags:7z FormBook


Avatar
abuse_ch
Malspam distributing Formbook:

HELO: mata.com
Sending IP: 173.82.208.176
From: motsoa@georgetexidor.com
Subject: Swift Copy
Attachment: Swift Copy.7z (contains "Swift Copy.exe")

Intelligence

File Origin
# of uploads :
1
# of downloads :
76
Origin country :
n/a
Vendor Threat Intelligence
Gathering data
Threat name:
Win32.Trojan.Kryptik
Create hunting rule
Status:
Malicious
First seen:
2020-05-27 12:35:21 UTC
File Type:
Binary (Archive)
Extracted files:
8
AV detection:
17 of 48 (35.42%)
Threat level:
  2/5
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Malspam

Formbook

7z 5115f90655630bafc0704e0d4560cd5919210ab7c36e01a7c37b96b84b1ece92

(this sample)

Formbook

Executable exe 3f180fe3f695de063f953d0c48408aceabbca729b3faa7316926c69650a5f8a4

  
Dropping
MD5 8d5bb155ec1fbeae176b38e35eafcc7f
  
Dropping
Formbook
  
Delivery method
Distributed via e-mail attachment
  
Dropping
SHA256 3f180fe3f695de063f953d0c48408aceabbca729b3faa7316926c69650a5f8a4

Comments